UpHeron
All vulnerabilities

Servers and applications

CVE-2017-0882

Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC.

Severity
Medium 6.3
Published
28 Mar 2017
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
GitLabServers and applications · cpe:a:gitlab:gitlab
  • Version 8.17.3
  • Version 8.17.2
  • Version 8.17.1
  • Version 8.17.0
All 59 release lines
  • Version 8.2.0
  • Version 8.2.1
  • Version 8.2.2
  • Version 8.2.3
  • Version 8.2.4
  • Version 8.2.5
  • Version 8.3.0
  • Version 8.3.8
  • Version 8.3.9
  • Version 8.4.0
  • Version 8.4.9
  • Version 8.4.10
  • Version 8.5.0
  • Version 8.5.11
  • Version 8.5.12
  • Version 8.6.0
  • Version 8.6.7
  • Version 8.6.8
  • Version 8.7.0
  • Version 8.7.1
  • Version 8.10.0
  • Version 8.10.12
  • Version 8.10.13
  • Version 8.11.0
  • Version 8.11.9
  • Version 8.11.10
  • Version 8.12.0
  • Version 8.12.7
  • Version 8.12.8
  • Version 8.13.0
  • Version 8.13.2
  • Version 8.13.3
  • Version 8.14.0
  • Version 8.14.1
  • Version 8.14.2
  • Version 8.14.3
  • Version 8.14.4
  • Version 8.14.5
  • Version 8.14.6
  • Version 8.15.0
  • Version 8.15.1
  • Version 8.15.2
  • Version 8.15.3
  • Version 8.15.4
  • Version 8.15.5
  • Version 8.15.6
  • Version 8.15.7
  • Version 8.16.0
  • Version 8.16.1
  • Version 8.16.2
  • Version 8.16.3
  • Version 8.16.4
  • Version 8.16.5
  • Version 8.16.6
  • Version 8.16.7
  • Version 8.17.0
  • Version 8.17.1
  • Version 8.17.2
  • Version 8.17.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-0882
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-0882