VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 21, 2018· Updated Jun 17, 2026

CVE-2017-0914

CVE-2017-0914

Description

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.

Affected products

4
  • GitLab Inc./GitLabllm-fuzzy3 versions
    10.1, 10.2, and 10.2.4+ 2 more
    • (no CPE)range: 10.1, 10.2, and 10.2.4
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=9.4.0,<=9.5.10
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=9.4.0,<=9.5.10
  • GitLab Inc./GitLab Community Editioncpe-rescue
    Range: 9.1.0 - 10.1.5 Fixed in 10.1.6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.