HTTP: GitLab Arbitrary File Write
This signature detects attempts to exploit a known vulnerability against GitLab CommunityEdition(CE) and EnterpriseEdition (EE). A successful attack can lead to arbitrary code execution.
Extended Description
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component.
Affected Products
Gitlab gitlab
Short Name
HTTP:GITLAB-FILE-WRTIE-RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Arbitrary CVE-2018-14364 File GitLab Write
Release Date
11/13/2018
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
Vendors
Gitlab
CVSS Score
7.5