{"id":"CVE-2017-12426","aliases":["EUVD-2017-3999","GHSA-mwvc-fhmm-47cq","UBUNTU-CVE-2017-12426"],"status":"published","title":"GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1...","description":"GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0354,"percentile":0.89362,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2017-08-14T21:00:00Z","modified":"2026-10-30T10:30:18Z","exploits":[{"source":"pocgithub","id":"sm-paul-schuette/CVE-2017-12426","title":"sm-paul-schuette/CVE-2017-12426","date":"2017-08-14","url":"https://github.com/sm-paul-schuette/CVE-2017-12426"}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gitlab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.4.3+dfsg-9","8.4.3+dfsg-12","8.5.8+dfsg-5"]}],"products":[{"vendor":"gitlab","product":"gitlab"}],"references":[{"url":"https://about.gitlab.com/2017/08/10/gitlab-9-dot-4-dot-4-released/","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1466490.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12426"},{"url":"https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1466490.html","tags":["report"]},{"url":"https://about.gitlab.com/2017/08/10/gitlab-9-dot-4-dot-4-released"},{"url":"https://github.com/advisories/GHSA-mwvc-fhmm-47cq"},{"url":"https://ubuntu.com/security/CVE-2017-12426","tags":["report"]},{"url":"https://gitlab.com/gitlab-org/gitlab-ce/issues/35212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12426","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-12426","description":"GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.","status":"published","published":"2017-08-14T21:00:00Z","modified":"2024-08-05T18:36:56.379Z","updated_at":"2026-11-02T14:33:17.59533Z"}],"euvd":[{"id":"EUVD-2017-3999","description":"GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.","status":"published","published":"2017-08-14T21:00:00Z","modified":"2024-08-05T18:36:56Z","updated_at":"2026-11-03T02:23:21.695208Z"}],"ghsa":[{"id":"GHSA-mwvc-fhmm-47cq","title":"GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1...","description":"GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.","status":"published","published":"2022-05-17T01:57:32Z","modified":"2025-04-20T03:43:09Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:50.044707Z"}],"nvd":[{"id":"CVE-2017-12426","description":"GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.","status":"published","published":"2017-08-14T21:29:00.213Z","modified":"2026-06-17T01:03:17.03Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:57.82609Z"}],"osv":[{"id":"CVE-2017-12426","description":"GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.","status":"published","published":"2017-08-14T21:29:00.213Z","modified":"2026-10-30T10:30:18.872823248Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"UBUNTU-CVE-2017-12426","description":"GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.","status":"published","published":"2017-08-14T21:29:00Z","modified":"2025-10-24T04:46:26Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.122973Z"}]}}