Read the docs

gitbucket

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

gitbucket records in CISA KEV

No gitbucket vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Gitbucket · all components

Priority HIGH 81

GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00589 Published 2026-05-17 No fix listed CWE-306
Open these records in search →