gitlab gitlab-shell 1.7.0

CPE Details

gitlab gitlab-shell 1.7.0
gitlab
gitlab-shell
1.7.0
2014-05-12
16h14 +00:00
2014-05-14
13h43 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:gitlab:gitlab-shell:1.7.0:*:*:*:*:*:*:*

Informations

Vendor

gitlab

Product

gitlab-shell

Version

1.7.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2013-4582 2020-01-28 14h17 +00:00 The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.
6.5
Moyen
CVE-2013-4583 2020-01-28 14h11 +00:00 The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories.
8.8
Haute
CVE-2013-4490 2014-05-13 13h00 +00:00 The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
6.5
CVE-2013-4546 2014-05-13 13h00 +00:00 The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.
6.5
CVE-2013-4581 2014-05-12 12h00 +00:00 GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH.
6.8