gitlab gitlab-shell 1.1.0

CPE Details

gitlab gitlab-shell 1.1.0
gitlab
gitlab-shell
1.1.0
2014-05-12
16h14 +00:00
2014-05-14
13h43 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:gitlab:gitlab-shell:1.1.0:*:*:*:*:*:*:*

Informations

Vendor

gitlab

Product

gitlab-shell

Version

1.1.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2013-4582 2020-01-28 14h17 +00:00 The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.
6.5
Medium
CVE-2013-4583 2020-01-28 14h11 +00:00 The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories.
8.8
High
CVE-2013-4490 2014-05-13 13h00 +00:00 The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
6.5
CVE-2013-4546 2014-05-13 13h00 +00:00 The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.
6.5
CVE-2013-4581 2014-05-12 12h00 +00:00 GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH.
6.8