CVE-2017-0914CWE-89

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in…

published March 21, 2018

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01366 · 71.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2018-03-21T20:00Z
EPSS history
Timeline
  • 21 MAR 20:00Z
    Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in…
    cvelistv5