Test Kennung:	1.3.6.1.4.1.25623.1.0.704145
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 4145-1 (gitlab - security update)
Zusammenfassung:	Several vulnerabilities have been discovered in Gitlab, a software;platform to collaborate on code:;;CVE-2017-0915 / CVE-2018-3710;Arbitrary code execution in project import.;;CVE-2017-0916;Command injection via Webhooks.;;CVE-2017-0917;Cross-site scripting in CI job output.;;CVE-2017-0918;Insufficient restriction of CI runner for project cache access.;;CVE-2017-0925;Information disclosure in Services API.;;CVE-2017-0926;Restrictions for disabled OAuth providers could be bypassed.
Beschreibung:	Summary: Several vulnerabilities have been discovered in Gitlab, a software platform to collaborate on code: CVE-2017-0915 / CVE-2018-3710 Arbitrary code execution in project import. CVE-2017-0916 Command injection via Webhooks. CVE-2017-0917 Cross-site scripting in CI job output. CVE-2017-0918 Insufficient restriction of CI runner for project cache access. CVE-2017-0925 Information disclosure in Services API. CVE-2017-0926 Restrictions for disabled OAuth providers could be bypassed. Affected Software/OS: gitlab on Debian Linux Solution: For the stable distribution (stretch), these problems have been fixed in version 8.13.11+dfsg1-8+deb9u1. We recommend that you upgrade your gitlab packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-0915 Debian Security Information: DSA-4145 (Google Search) https://www.debian.org/security/2018/dsa-4145 https://hackerone.com/reports/298873 Common Vulnerability Exposure (CVE) ID: CVE-2017-0916 https://hackerone.com/reports/299473 Common Vulnerability Exposure (CVE) ID: CVE-2017-0917 https://hackerone.com/reports/299525 Common Vulnerability Exposure (CVE) ID: CVE-2017-0918 https://hackerone.com/reports/301432 Common Vulnerability Exposure (CVE) ID: CVE-2017-0925 Common Vulnerability Exposure (CVE) ID: CVE-2017-0926 Common Vulnerability Exposure (CVE) ID: CVE-2018-3710 https://gitlab.com/gitlab-com/infrastructure/issues/3510 https://hackerone.com/reports/302959
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.