CVE-2017-11437 | BDVDB-2026-88402 Detail

Description#

GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://about.gitlab.com/2017/07/19/gitlab-9-dot-3-dot-8-released/

Exploit#

No public exploit known

History#

Version 12017-08-02Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.