CVE-2017-12426

Source
https://cve.org/CVERecord?id=CVE-2017-12426
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12426.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-12426
Downstream
Related
Published
2017-08-14T21:29:00.213Z
Modified
2026-04-10T03:56:43.462028Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Database specific
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.17.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.17.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.4.3"
        }
    ]
}

Affected versions

v1.*
v1.2.0
v1.2.0pre
v1.2.1
v1.2.2
v2.*
v2.3.0
v2.3.0pre
v2.3.1
v2.4.0
v2.4.0pre
v2.4.1
v2.5.0
v2.6.0
v2.6.0pre
v2.6.1
v2.6.2
v2.6.3
v2.7.0
v2.7.0pre
v2.8.0
v2.8.0pre
v2.8.1
v2.8.2
v2.9.0
v2.9.1
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.1.0
v4.*
v4.0.0
v4.0.0rc1
v4.0.0rc2
v5.*
v5.0.0
v5.1.0
v5.2.0
v5.3.0
v6.*
v6.0.0
v6.0.0-ee
v6.0.0-ee.beta
v6.0.0-ee.rc1
v6.1.0-ee
v6.2.0
v6.3.0
v6.3.0-ee
v6.3.1-ee
v6.4.0
v6.4.0-ee
v6.4.0.pre1
v6.4.0.pre2
v6.4.0.pre3
v6.5.0
v6.5.0-ee
v6.5.0.rc1
v6.6.0
v6.6.0-ee
v6.6.0.pre1
v6.6.0.rc1
v6.7.0-ee
v6.7.0.rc1
v6.7.0.rc1-ee
v6.8.0-ee
v7.*
v7.0.0
v7.0.0-ee
v7.0.0.rc1
v7.1.0
v7.1.0-ee
v7.1.0.rc1
v7.1.0.rc1-ee
v7.2.0.rc1
v7.2.0.rc1-ee
v7.2.0.rc2
v7.2.0.rc2-ee
v7.2.0.rc3
v7.2.0.rc3-ee
v7.2.0.rc4
v7.2.0.rc4-ee
v7.2.0.rc5
v7.2.0.rc5-ee
v7.3.0
v7.3.0-ee
v7.3.0.rc1
v7.3.0.rc1-ee
v8.*
v8.11.0.pre
v8.13.0.pre
v8.14.0.pre
v8.15.0.pre
v8.16.0.pre
v8.17.0-ee
v8.17.0-rc1-ee
v8.17.0-rc2-ee
v8.17.0-rc3-ee
v8.17.0-rc4-ee
v8.17.0-rc5-ee
v8.17.0.pre
v8.17.1-ee
v8.17.2-ee
v8.17.3-ee
v8.17.4-ee
v8.17.5-ee
v8.17.6-ee
v8.17.7-ee
v8.18.0.pre
v9.*
v9.0.0-ee
v9.0.0-rc1-ee
v9.0.0-rc2-ee
v9.0.0-rc3-ee
v9.0.0-rc4-ee
v9.0.0-rc5-ee
v9.0.0-rc6-ee
v9.0.0-rc7-ee
v9.0.1-ee
v9.0.10-ee
v9.0.11-ee
v9.0.12-ee
v9.0.2-ee
v9.0.3-ee
v9.0.4-ee
v9.0.5-ee
v9.0.6-ee
v9.0.7-ee
v9.0.8-ee
v9.0.9-ee
v9.1.0-ee
v9.1.0-rc1-ee
v9.1.0-rc2-ee
v9.1.0-rc3-ee
v9.1.0-rc4-ee
v9.1.0-rc5-ee
v9.1.0-rc6-ee
v9.1.0-rc7-ee
v9.1.0.pre
v9.1.1-ee
v9.1.2-ee
v9.1.3-ee
v9.1.4-ee
v9.1.5-ee
v9.1.6-ee
v9.1.7-ee
v9.1.8-ee
v9.1.9-ee
v9.2.0-ee
v9.2.0-rc1-ee
v9.2.0-rc2-ee
v9.2.0-rc3-ee
v9.2.0-rc4-ee
v9.2.0-rc5-ee
v9.2.0-rc6-ee
v9.2.0-rc7-ee
v9.2.0.pre
v9.2.1-ee
v9.2.2-ee
v9.2.3-ee
v9.2.4-ee
v9.2.5-ee
v9.2.6-ee
v9.2.7-ee
v9.2.8-ee
v9.2.9-ee
v9.3.0-ee
v9.3.0-rc1-ee
v9.3.0-rc2-ee
v9.3.0-rc3-ee
v9.3.0-rc4-ee
v9.3.0-rc5-ee
v9.3.0-rc6-ee
v9.3.0-rc7-ee
v9.3.0.pre
v9.3.1-ee
v9.3.2-ee
v9.3.3-ee
v9.3.4-ee
v9.3.5-ee
v9.3.6-ee
v9.3.7-ee
v9.3.8-ee
v9.3.9-ee
v9.4.0-ee
v9.4.0-rc1-ee
v9.4.0-rc2-ee
v9.4.0-rc3-ee
v9.4.0-rc4-ee
v9.4.0-rc5-ee
v9.4.0-rc6-ee
v9.4.1-ee
v9.4.2-ee
v9.4.3-ee

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12426.json"