CVE-2017-0916

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 10.3

Description The issue is related to a lack of input validation in the system hook push queue through the web hook component, resulting in remote code execution.

Recommendations For Gitlab Community Edition version 10.3, consider disabling the web hook component until a patch is available to prevent remote code execution. Restrict access to the system hook push queue to minimize the risk of exploitation.