CVE-2018-3710

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-3710

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-3710.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2018-3710

Downstream

DSA-4145-1

Published

2018-03-21T20:29:01.027Z

Modified

2026-03-19T08:46:59.822440Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type

GIT

Repo

https://gitlab.com/gitlab-org/gitlab

Events

Introduced

eb7f876a679dba6ae5ec739f94265f0e0f3516e8

Last affected

9c32fedb6d29601a9cb698a25f8b917724b484b3

Introduced

eb7f876a679dba6ae5ec739f94265f0e0f3516e8

Last affected

9c32fedb6d29601a9cb698a25f8b917724b484b3

Introduced

235b8d50ad14e7cdf4bc61c3df070f38dee97974

Last affected

5a1abb98b40ef0047d634b6ff09c3379da46cff9

Introduced

Last affected

3ec4b67ffebfd15dd22fca7b35b0405454422df7

Introduced

d90716aff22310b27734df86d287d2cb4084fdbb

Last affected

3ec4b67ffebfd15dd22fca7b35b0405454422df7

Introduced

Last affected

3f64be9aeeb1a8c7c88b50bdf0212118dc265ce6

Introduced

6369db0196ec7b6e288b16382c95243424a59b62

Last affected

3f64be9aeeb1a8c7c88b50bdf0212118dc265ce6

Introduced

Last affected

f33774cb120324d428dabf52c89b8a65e4d4c166

Database specific

{
    "versions": [
        {
            "introduced": "8.9.0"
        },
        {
            "last_affected": "9.5.10"
        },
        {
            "introduced": "8.9.0"
        },
        {
            "last_affected": "9.5.10"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "last_affected": "10.1.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "10.2.5"
        },
        {
            "introduced": "10.2.0"
        },
        {
            "last_affected": "10.2.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "10.3.3"
        },
        {
            "introduced": "10.3.0"
        },
        {
            "last_affected": "10.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        }
    ]
}

Affected versions

v10.*

v10.2.0

v10.2.0-ee

v10.2.0-rc1

v10.2.0-rc1-ee

v10.2.0-rc2

v10.2.0-rc2-ee

v10.2.0-rc3

v10.2.0-rc3-ee

v10.2.0-rc4

v10.2.0-rc4-ee

v10.2.0.pre

v10.2.1

v10.2.1-ee

v10.2.2

v10.2.2-ee

v10.2.3

v10.2.3-ee

v10.2.4

v10.2.4-ee

v10.2.5-ee

v10.3.0

v10.3.0-ee

v10.3.0-rc1

v10.3.0-rc1-ee

v10.3.0-rc2

v10.3.0-rc2-ee

v10.3.0-rc3

v10.3.0-rc3-ee

v10.3.0-rc4

v10.3.0-rc4-ee

v10.3.0-rc5

v10.3.0-rc5-ee

v10.3.0.pre

v10.3.1

v10.3.1-ee

v10.3.2

v10.3.2-ee

v10.3.3-ee

v6.*

v6.0.0-ee

v6.0.0-ee.beta

v6.0.0-ee.rc1

v6.1.0-ee

v6.2.1

v6.2.2

v6.3.0-ee

v6.3.1-ee

v6.4.0-ee

v6.4.1

v6.4.2

v6.4.3

v6.5.0-ee

v6.5.1

v6.6.0-ee

v6.6.1

v6.6.2

v6.7.0-ee

v6.7.0.rc1-ee

v6.7.1

v6.7.2

v6.8.0-ee

v6.8.1

v7.*

v7.0.0-ee

v7.1.0-ee

v7.1.0.rc1-ee

v7.2.0.rc1-ee

v7.2.0.rc2-ee

v7.2.0.rc3-ee

v7.2.0.rc4-ee

v7.2.0.rc5-ee

v7.3.0-ee

v7.3.0.rc1-ee

v7.4.0-ee

v7.4.1-ee

v7.4.2-ee

v7.4.3-ee

v7.4.4-ee

v8.*

v8.11.0

v8.11.0-ee

v8.11.0-rc1

v8.11.0-rc1-ee

v8.11.0-rc2

v8.11.0-rc2-ee

v8.11.0-rc3

v8.11.0-rc3-ee

v8.11.0-rc4

v8.11.0-rc4-ee

v8.11.0-rc5

v8.11.0-rc5-ee

v8.11.0-rc6

v8.11.0-rc6-ee

v8.11.0-rc7

v8.11.0-rc7-ee

v8.11.1

v8.12.0

v8.12.0-ee

v8.12.0-rc1

v8.12.0-rc1-ee

v8.12.0-rc2

v8.12.0-rc2-ee

v8.12.0-rc3

v8.12.0-rc3-ee

v8.12.0-rc4

v8.12.0-rc4-ee

v8.12.0-rc5

v8.12.0-rc5-ee

v8.12.0-rc6

v8.12.0-rc6-ee

v8.12.0-rc7

v8.12.0-rc7-ee

v8.12.0.pre

v8.12.1

v8.12.1-ee

v8.12.2

v8.12.2-ee

v8.12.3-ee

v8.2.0-ee

v8.2.0.rc1

v8.2.0.rc1-ee

v8.2.0.rc2

v8.2.0.rc2-ee

v8.8.0

v8.8.0-ee

v8.8.0-rc1

v8.8.0-rc1-ee

v8.8.0-rc2

v8.8.0-rc2-ee

v8.8.1-ee

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-3710.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "10.0.0"
            },
            {
                "last_affected": "10.1.15"
            }
        ]
    }
]