Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-0917

Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.5%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2017-0917
  • Gitlab » Gitlab » Version: 10.1.0
    cpe:2.3:a:gitlab:gitlab:10.1.0
  • Gitlab » Gitlab » Version: 10.1.1
    cpe:2.3:a:gitlab:gitlab:10.1.1
  • Gitlab » Gitlab » Version: 10.1.2
    cpe:2.3:a:gitlab:gitlab:10.1.2
  • Gitlab » Gitlab » Version: 10.1.3
    cpe:2.3:a:gitlab:gitlab:10.1.3
  • Gitlab » Gitlab » Version: 10.1.4
    cpe:2.3:a:gitlab:gitlab:10.1.4
  • Gitlab » Gitlab » Version: 10.1.5
    cpe:2.3:a:gitlab:gitlab:10.1.5
  • Gitlab » Gitlab » Version: 10.2.0
    cpe:2.3:a:gitlab:gitlab:10.2.0
  • Gitlab » Gitlab » Version: 10.2.1
    cpe:2.3:a:gitlab:gitlab:10.2.1
  • Gitlab » Gitlab » Version: 10.2.2
    cpe:2.3:a:gitlab:gitlab:10.2.2
  • Gitlab » Gitlab » Version: 10.2.3
    cpe:2.3:a:gitlab:gitlab:10.2.3
  • Gitlab » Gitlab » Version: 10.2.4
    cpe:2.3:a:gitlab:gitlab:10.2.4
  • Gitlab » Gitlab » Version: 10.2.5
    cpe:2.3:a:gitlab:gitlab:10.2.5
  • Gitlab » Gitlab » Version: 10.3.0
    cpe:2.3:a:gitlab:gitlab:10.3.0
  • Gitlab » Gitlab » Version: 10.3.1
    cpe:2.3:a:gitlab:gitlab:10.3.1
  • Gitlab » Gitlab » Version: 10.3.2
    cpe:2.3:a:gitlab:gitlab:10.3.2
  • Gitlab » Gitlab » Version: 10.3.3
    cpe:2.3:a:gitlab:gitlab:10.3.3
  • Debian » Debian Linux » Version: 9.0
    cpe:2.3:o:debian:debian_linux:9.0


Contact Us

Shodan ® - All rights reserved