VULNERABILITY INTELLIGENCE

CVE-2017-0927

CVSS score6.5 MEDIUM

EPSS probability0.79%

CISA KEVNot currently listed

Published2018-03-21

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.

Weakness classification

CWE-285: Improper Authorization
CWE-863: Incorrect Authorization

Primary references

support@hackerone.com — Vendor Advisory
support@hackerone.com — Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory