CVE-2018-14364

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>rubygem-gitlab_meta</name>
	<range><lt>10.7.7</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before
	10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write
	access and resultant remote code execution via the GitLab projects
	import component.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2018-14364</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2018-14364</url>
    </references>
    <dates>
      <discovery>2018-07-18</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>