Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
gitbucket records in CISA KEVNo gitbucket vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 81
GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00589 · Published 2026-05-17 · No fix listed CWE-306
Open these records in search →