PT-2018-16134 · Gitlab · Gitlab Ce/Ee+1
CVE-2018-3710
·
Publicado
2018-03-18
·
Atualizado
2023-02-28
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Gitlab Community and Enterprise Editions version 10.3.3
Description
The issue is related to an insecure temporary file in the project import component, which can result in remote code execution.
Recommendations
For Gitlab Community and Enterprise Editions version 10.3.3, update to a version that fixes the insecure temporary file issue in the project import component to prevent remote code execution.
Correção
RCE
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Gitlab
Gitlab Ce/Ee