Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab_community_and_enterprise_editions:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90)
ProductGitlab Community And Enterprise Editions (2051efda-77d5-5d6d-b1da-8f18dd44aeef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-3710 vulnerable 2026-06-08 05:11:41.147901 Details available
Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.
Published: 2018-03-21T20:00:00.000Z
Updated: 2024-08-05T04:50:30.417Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0927 vulnerable 2026-06-08 05:08:26.981635 Details available
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.
Published: 2018-03-21T20:00:00.000Z
Updated: 2024-08-05T13:25:16.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0926 vulnerable 2026-06-08 05:08:26.981249 Details available
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login.
Published: 2018-03-21T20:00:00.000Z
Updated: 2024-08-05T13:25:16.917Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0925 vulnerable 2026-06-08 05:08:26.980820 Details available
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.
Published: 2018-03-21T20:00:00.000Z
Updated: 2024-08-05T13:25:17.478Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0924 vulnerable 2026-06-08 05:08:26.980171 Details available
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.
Published: 2018-03-21T20:00:00.000Z
Updated: 2024-08-05T13:25:17.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0923 vulnerable 2026-06-08 05:08:26.971239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0922 vulnerable 2026-06-08 05:08:26.970881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0920 vulnerable 2026-06-08 05:08:26.970186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0918 vulnerable 2026-06-08 05:08:26.969440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0917 vulnerable 2026-06-08 05:08:26.969006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0916 vulnerable 2026-06-08 05:08:26.968597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0915 vulnerable 2026-06-08 05:08:26.968141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0914 vulnerable 2026-06-08 05:08:26.966287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.