PoC Index

CVE-2018-18649

CRITICAL 9.8EPSS 6.7%

An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for remote code execution.

CVSS v3.0
9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
6.73% chance of exploitation in the next 30 days, 93th percentile
Published
2018-11-29
Updated
2024-08-05

Proof-of-concept exploits (1)

References

Related