Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: GitLab Component: Gitlab-shell Clear all filters
TI-2013-04027 CVE-2013-4582 · GHSA-wpgv-98gg-67q7

The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions…

Priority LOW 33

The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-s…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01938 Published 2020-01-28 Fixed in 5.4.2, 6.2.4 +2 CWE-829
TI-2013-04028 CVE-2013-4583 · GHSA-r692-jg36-6v4p

Improper privilege management in GitLab

Priority MEDIUM 42

The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privil…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02 Published 2020-01-28 Fixed in 5.4.2, 6.2.4 +2 CWE-269
TI-2013-03939 CVE-2013-4490 · GHSA-9hhr-gwc7-jcvh

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in…

Priority MEDIUM 57

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharact…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.42139 Published 2014-05-13 No fix listed