Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2017-11438

GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a subgroup.

  • Published: Aug 2, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-11438
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
gitlab / gitlab 9.2.2 9.2.2.x
gitlab / gitlab 9.0.9 9.0.9.x
gitlab / gitlab 9.0.2 9.0.2.x
gitlab / gitlab 9.0.8 9.0.8.x
gitlab / gitlab 9.0.1 9.0.1.x
gitlab / gitlab 9.0.6 9.0.6.x
gitlab / gitlab 9.1.6 9.1.6.x
gitlab / gitlab 9.1.7 9.1.7.x
gitlab / gitlab 9.1.1 9.1.1.x
gitlab / gitlab 9.2.4 9.2.4.x
gitlab / gitlab 9.0.5 9.0.5.x
gitlab / gitlab 9.2.1 9.2.1.x
gitlab / gitlab 9.0.0 9.0.0.x
gitlab / gitlab 9.1.4 9.1.4.x
gitlab / gitlab 9.1.0 9.1.0.x
gitlab / gitlab 9.2.5 9.2.5.x
gitlab / gitlab 9.2.7 9.2.7.x
gitlab / gitlab 9.1.5 9.1.5.x
gitlab / gitlab 9.0.4 9.0.4.x
gitlab / gitlab 9.0.3 9.0.3.x
gitlab / gitlab 9.1.2 9.1.2.x
gitlab / gitlab 9.0.10 9.0.10.x
gitlab / gitlab 9.1.3 9.1.3.x
gitlab / gitlab 9.2.6 9.2.6.x
gitlab / gitlab 9.2.3 9.2.3.x
gitlab / gitlab 9.2.0 9.2.0.x
gitlab / gitlab 9.0.7 9.0.7.x