CVE-2017-0927

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-0927
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-0927.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-0927
Published
2018-03-21T20:29:00.857Z
Modified
2026-02-11T10:22:13.304247Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
235b8d50ad14e7cdf4bc61c3df070f38dee97974
Last affected
5a1abb98b40ef0047d634b6ff09c3379da46cff9
Introduced
47550d092f0a6cbedc58752d1a220fe519b8ea01
Last affected
9c32fedb6d29601a9cb698a25f8b917724b484b3
Introduced
6369db0196ec7b6e288b16382c95243424a59b62
Last affected
3f64be9aeeb1a8c7c88b50bdf0212118dc265ce6
Introduced
d90716aff22310b27734df86d287d2cb4084fdbb
Last affected
3ec4b67ffebfd15dd22fca7b35b0405454422df7

Affected versions

v10.*
v10.1.0
v10.1.0-ee
v10.1.0-rc1
v10.1.0-rc1-ee
v10.1.0-rc2
v10.1.0-rc2-ee
v10.1.0-rc3
v10.1.0-rc3-ee
v10.1.0-rc4
v10.1.0-rc4-ee
v10.1.0.pre
v10.1.1
v10.1.1-ee
v10.1.2
v10.1.2-ee
v10.1.3
v10.1.3-ee
v10.1.4
v10.1.4-ee
v10.1.5-ee
v10.2.0
v10.2.0-ee
v10.2.0-rc1
v10.2.0-rc1-ee
v10.2.0-rc2
v10.2.0-rc2-ee
v10.2.0-rc3
v10.2.0-rc3-ee
v10.2.0-rc4
v10.2.0-rc4-ee
v10.2.0.pre
v10.2.1
v10.2.1-ee
v10.2.2
v10.2.2-ee
v10.2.3
v10.2.3-ee
v10.2.4
v10.2.4-ee
v10.2.5-ee
v10.3.0
v10.3.0-ee
v10.3.0-rc1
v10.3.0-rc1-ee
v10.3.0-rc2
v10.3.0-rc2-ee
v10.3.0-rc3
v10.3.0-rc3-ee
v10.3.0-rc4
v10.3.0-rc4-ee
v10.3.0-rc5
v10.3.0-rc5-ee
v10.3.0.pre
v10.3.1
v10.3.1-ee
v10.3.2
v10.3.2-ee
v10.3.3-ee
v6.*
v6.0.0-ee
v6.0.0-ee.beta
v6.0.0-ee.rc1
v6.1.0-ee
v6.2.1
v6.2.2
v6.3.0-ee
v6.3.1-ee
v6.4.0-ee
v6.4.1
v6.4.2
v6.4.3
v6.5.0-ee
v6.5.1
v6.6.0-ee
v6.6.1
v6.6.2
v6.7.0-ee
v6.7.0.rc1-ee
v6.7.1
v6.7.2
v6.8.0-ee
v6.8.1
v7.*
v7.0.0-ee
v7.1.0-ee
v7.1.0.rc1-ee
v7.2.0.rc1-ee
v7.2.0.rc2-ee
v7.2.0.rc3-ee
v7.2.0.rc4-ee
v7.2.0.rc5-ee
v7.3.0-ee
v7.3.0.rc1-ee
v7.4.0-ee
v7.4.1-ee
v7.4.2-ee
v7.4.3-ee
v7.4.4-ee
v8.*
v8.11.0
v8.11.0-ee
v8.11.0-rc1
v8.11.0-rc1-ee
v8.11.0-rc2
v8.11.0-rc2-ee
v8.11.0-rc3
v8.11.0-rc3-ee
v8.11.0-rc4
v8.11.0-rc4-ee
v8.11.0-rc5
v8.11.0-rc5-ee
v8.11.0-rc6
v8.11.0-rc6-ee
v8.11.0-rc7
v8.11.0-rc7-ee
v8.11.1
v8.12.0
v8.12.0-ee
v8.12.0-rc1
v8.12.0-rc1-ee
v8.12.0-rc2
v8.12.0-rc2-ee
v8.12.0-rc3
v8.12.0-rc3-ee
v8.12.0-rc4
v8.12.0-rc4-ee
v8.12.0-rc5
v8.12.0-rc5-ee
v8.12.0-rc6
v8.12.0-rc6-ee
v8.12.0-rc7
v8.12.0-rc7-ee
v8.12.0.pre
v8.12.1
v8.12.1-ee
v8.12.2
v8.12.2-ee
v8.12.3-ee
v8.16.0.pre
v8.17.0.pre
v8.18.0.pre
v8.2.0-ee
v8.2.0.rc1
v8.2.0.rc1-ee
v8.2.0.rc2
v8.2.0.rc2-ee
v8.8.0
v8.8.0-ee
v8.8.0-rc1
v8.8.0-rc1-ee
v8.8.0-rc2
v8.8.0-rc2-ee
v8.8.1-ee
v9.*
v9.1.0.pre
v9.2.0.pre
v9.3.0.pre
v9.5.0
v9.5.0-ee
v9.5.0-rc1
v9.5.0-rc1-ee
v9.5.0-rc2
v9.5.0-rc2-ee
v9.5.0-rc3-ee
v9.5.0-rc4
v9.5.0-rc4-ee
v9.5.0-rc5
v9.5.0-rc5-ee
v9.5.0-rc6
v9.5.0-rc6-ee
v9.5.0-rc7-ee
v9.5.0-rc8
v9.5.0-rc8-ee
v9.5.0.pre
v9.5.1
v9.5.1-ee
v9.5.10-ee
v9.5.2
v9.5.2-ee
v9.5.3
v9.5.3-ee
v9.5.4
v9.5.4-ee
v9.5.5
v9.5.5-ee
v9.5.6
v9.5.6-ee
v9.5.7
v9.5.7-ee
v9.5.8
v9.5.8-ee
v9.5.9
v9.5.9-ee
v9.6.0.pre

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-0927.json"