CVE-2017-11437

—

CVSS 3.0

6.5 medium

EPSS

<1%p54

Published

Aug 2, 2017 (Aug 2, 2017)

Modified

Jun 17, 2026

Description

GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.

Vendors: gitlab
Products: gitlab
Weakness: CWE-732
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.