Launchpad.net

CVE 2017-0918

Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.

See the CVE page on Mitre.org for more details.