CVE-2013-4489

EPSS 0.2%
Published 17.05.2014 20:55:02
Last modified 12.04.2025 10:46:40
Source secalert@redhat.com
Teams watchlist Login
Open Login

The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands, as demonstrated by the search box for the GitLab code search feature.

Affected products Warnungen 0 Metrics 2 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Gitlab ≫ Gitlab Version5.2.0

Gitlab ≫ Gitlab Version5.3.0

Gitlab ≫ Gitlab Version5.4.0

Gitlab ≫ Gitlab Version6.0.0

Gitlab ≫ Gitlab Version6.1.0

Gitlab ≫ Gitlab Version6.2.0

Gitlab ≫ Gitlab Version6.2.1

Gitlab ≫ Gitlab Version6.2.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.2%	0.393

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

https://www.gitlab.com/2013/11/04/gitlab-ce-6-2-and-5-4-security-release/

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-4489

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4489

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4489

EUVD