CVE-2017-0914

2018-03-2120:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

48.4%

JSON

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance’s database.

CPENameOperatorVersion
gitlabeq10.3.1-ee
gitlabeq10.3.0-ee
gitlabeq10.2.4-ee
gitlabeq10.2.4
gitlabeq10.2.5-ee
gitlabeq10.3.1
gitlabeq10.3.2
gitlabeq10.2.1
gitlabeq10.3.0-rc5
gitlabeq10.2.0

Name	Operator	Version
gitlab	eq	10.3.1-ee
gitlab	eq	10.3.0-ee
gitlab	eq	10.2.4-ee
gitlab	eq	10.2.4
gitlab	eq	10.2.5-ee
gitlab	eq	10.3.1
gitlab	eq	10.3.2
gitlab	eq	10.2.1
gitlab	eq	10.3.0-rc5
gitlab	eq	10.2.0