6.5

CVE-2013-4490

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.

Data is provided by the National Vulnerability Database (NVD)
Gitlab ≫ Gitlab Version5.0.0
Gitlab ≫ Gitlab Version5.0.1
Gitlab ≫ Gitlab Version5.1.0
Gitlab ≫ Gitlab Version5.2.0
Gitlab ≫ Gitlab Version5.3.0
Gitlab ≫ Gitlab Version5.4.0
Gitlab ≫ Gitlab Version6.0.0
Gitlab ≫ Gitlab Version6.1.0
Gitlab ≫ Gitlab Version6.2.0
Gitlab ≫ Gitlab Version6.2.1
Gitlab ≫ Gitlab Version6.2.2
Gitlab ≫ Gitlab-shell Version <= 1.7.2
Gitlab ≫ Gitlab-shell Version1.0.4
Gitlab ≫ Gitlab-shell Version1.1.0
Gitlab ≫ Gitlab-shell Version1.2.0
Gitlab ≫ Gitlab-shell Version1.3.0
Gitlab ≫ Gitlab-shell Version1.4.0
Gitlab ≫ Gitlab-shell Version1.5.0
Gitlab ≫ Gitlab-shell Version1.6.0
Gitlab ≫ Gitlab-shell Version1.7.0
Gitlab ≫ Gitlab-shell Version1.7.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 48.02% 0.975
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P