← Back

CVE-2017-12426

nvd nist
Published: Aug 14, 2017Modified: May 13, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.

Affected (96)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
96 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
Up to 8.17.7
Gitlab
Up to 8.17.7
Gitlab
Version 9.0.0
Gitlab
Version 9.0.0
Gitlab
Version 9.0.10
Gitlab
Version 9.0.10
Gitlab
Version 9.0.11
Gitlab
Version 9.0.11
Gitlab
Version 9.0.12
Gitlab
Version 9.0.12
Gitlab
Version 9.0.1
Gitlab
Version 9.0.1
Gitlab
Version 9.0.2
Gitlab
Version 9.0.2
Gitlab
Version 9.0.3
Gitlab
Version 9.0.3
Gitlab
Version 9.0.4
Gitlab
Version 9.0.4
Gitlab
Version 9.0.5
Gitlab
Version 9.0.5
Gitlab
Version 9.0.6
Gitlab
Version 9.0.6
Gitlab
Version 9.0.7
Gitlab
Version 9.0.7
Gitlab
Version 9.0.8
Gitlab
Version 9.0.8
Gitlab
Version 9.0.9
Gitlab
Version 9.0.9
Gitlab
Version 9.1.0
Gitlab
Version 9.1.0
Gitlab
Version 9.1.1
Gitlab
Version 9.1.1
Gitlab
Version 9.1.2
Gitlab
Version 9.1.2
Gitlab
Version 9.1.3
Gitlab
Version 9.1.3
Gitlab
Version 9.1.4
Gitlab
Version 9.1.4
Gitlab
Version 9.1.5
Gitlab
Version 9.1.5
Gitlab
Version 9.1.6
Gitlab
Version 9.1.6
Gitlab
Version 9.1.7
Gitlab
Version 9.1.7
Gitlab
Version 9.1.8
Gitlab
Version 9.1.8
Gitlab
Version 9.1.9
Gitlab
Version 9.1.9
Gitlab
Version 9.2.0
Gitlab
Version 9.2.0
Gitlab
Version 9.2.1
Gitlab
Version 9.2.1
Gitlab
Version 9.2.2
Gitlab
Version 9.2.2
Gitlab
Version 9.2.3
Gitlab
Version 9.2.3
Gitlab
Version 9.2.4
Gitlab
Version 9.2.4
Gitlab
Version 9.2.5
Gitlab
Version 9.2.5
Gitlab
Version 9.2.6
Gitlab
Version 9.2.6
Gitlab
Version 9.2.7
Gitlab
Version 9.2.7
Gitlab
Version 9.2.8
Gitlab
Version 9.2.8
Gitlab
Version 9.2.9
Gitlab
Version 9.2.9
Gitlab
Version 9.3.0
Gitlab
Version 9.3.0
Gitlab
Version 9.3.1
Gitlab
Version 9.3.1
Gitlab
Version 9.3.2
Gitlab
Version 9.3.2
Gitlab
Version 9.3.3
Gitlab
Version 9.3.3
Gitlab
Version 9.3.4
Gitlab
Version 9.3.4
Gitlab
Version 9.3.5
Gitlab
Version 9.3.5
Gitlab
Version 9.3.6
Gitlab
Version 9.3.6
Gitlab
Version 9.3.7
Gitlab
Version 9.3.7
Gitlab
Version 9.3.8
Gitlab
Version 9.3.8
Gitlab
Version 9.3.9
Gitlab
Version 9.3.9
Gitlab
Version 9.4.0
Gitlab
Version 9.4.0
Gitlab
Version 9.4.1
Gitlab
Version 9.4.1
Gitlab
Version 9.4.2
Gitlab
Version 9.4.2
Gitlab
Version 9.4.3
Gitlab
Version 9.4.3

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: cve@mitre.org
MitigationRelease NotesVendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationRelease NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.