CVE-2017-0914

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-0914

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0914.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-0914

Published

2018-03-21T20:29:00Z

Modified

2026-10-30T10:30:54Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type

GIT

Repo

https://gitlab.com/gitlab-org/gitlab

Events

Introduced

1cfb4f1bd87be2a38c61dbe78f10c351449ab8b4

Last Affected

9c32fedb6d29601a9cb698a25f8b917724b484b3

Introduced

235b8d50ad14e7cdf4bc61c3df070f38dee97974

Last Affected

5a1abb98b40ef0047d634b6ff09c3379da46cff9

Introduced

d90716aff22310b27734df86d287d2cb4084fdbb

Last Affected

3ec4b67ffebfd15dd22fca7b35b0405454422df7

Introduced

6369db0196ec7b6e288b16382c95243424a59b62

Last Affected

3f64be9aeeb1a8c7c88b50bdf0212118dc265ce6

Database specific

Show details

{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "9.4.0"
                },
                {
                    "last_affected": "9.5.10"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "9.4.0"
                },
                {
                    "last_affected": "9.5.10"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "10.0.0"
                },
                {
                    "last_affected": "10.1.5"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "10.0.0"
                },
                {
                    "last_affected": "10.1.5"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "10.2.0"
                },
                {
                    "last_affected": "10.2.5"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "10.2.0"
                },
                {
                    "last_affected": "10.2.5"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "10.3.0"
                },
                {
                    "last_affected": "10.3.3"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "10.3.0"
                },
                {
                    "last_affected": "10.3.3"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0914.json"