6.5

CVE-2013-4490

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gitlab ≫ Gitlab Version5.0.0
Gitlab ≫ Gitlab Version5.0.1
Gitlab ≫ Gitlab Version5.1.0
Gitlab ≫ Gitlab Version5.2.0
Gitlab ≫ Gitlab Version5.3.0
Gitlab ≫ Gitlab Version5.4.0
Gitlab ≫ Gitlab Version6.0.0
Gitlab ≫ Gitlab Version6.1.0
Gitlab ≫ Gitlab Version6.2.0
Gitlab ≫ Gitlab Version6.2.1
Gitlab ≫ Gitlab Version6.2.2
Gitlab ≫ Gitlab-shell Version <= 1.7.2
Gitlab ≫ Gitlab-shell Version1.0.4
Gitlab ≫ Gitlab-shell Version1.1.0
Gitlab ≫ Gitlab-shell Version1.2.0
Gitlab ≫ Gitlab-shell Version1.3.0
Gitlab ≫ Gitlab-shell Version1.4.0
Gitlab ≫ Gitlab-shell Version1.5.0
Gitlab ≫ Gitlab-shell Version1.6.0
Gitlab ≫ Gitlab-shell Version1.7.0
Gitlab ≫ Gitlab-shell Version1.7.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 48.02% 0.975
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P