CVE-2017-12426

Description

GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.

References

https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1466490.html

https://about.gitlab.com/2017/08/10/gitlab-9-dot-4-dot-4-released/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3