High severity7.8NVD Advisory· Published Mar 21, 2018· Updated Jun 17, 2026
CVE-2018-3710
CVE-2018-3710
Description
Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
68.9 - 10.1.5 Fixed in 10.1.6+ 1 more
- (no CPE)range: 8.9 - 10.1.5 Fixed in 10.1.6
- (no CPE)range: <10.3.4
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=8.9.0,<=9.5.10
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=8.9.0,<=9.5.10
- Range: <10.3.4
Patches
Vulnerability mechanics
References
5- about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/nvdVendor Advisory
- gitlab.com/gitlab-com/infrastructure/issues/3510nvdVendor Advisory
- gitlab.com/gitlab-org/gitlab-ce/issues/41757nvdVendor Advisory
- www.debian.org/security/2018/dsa-4145nvdThird Party Advisory
- hackerone.com/reports/302959nvdPermissions Required
News mentions
0No linked articles in our index yet.