Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution.
CPE | Name | Operator | Version |
---|---|---|---|
gitlab | eq | 10.3.1-ee | |
gitlab | eq | 10.3.0-ee | |
gitlab | eq | 8.12.0-rc2-ee | |
gitlab | eq | 8.11.0-rc6-ee | |
gitlab | eq | 10.1.2 | |
gitlab | eq | 9.6.0.pre | |
gitlab | eq | 10.1.3-ee | |
gitlab | eq | 10.1.0-ee | |
gitlab | eq | 10.1.0-rc2-ee | |
gitlab | eq | 8.11.0-rc5-ee |