6.8

CVE-2013-4580

GitLab before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1, when using a MySQL backend, allows remote attackers to impersonate arbitrary users and bypass authentication via unspecified API calls.

Data is provided by the National Vulnerability Database (NVD)
Gitlab ≫ Gitlab Version <= 5.4.1
Gitlab ≫ Gitlab Version0.8.0
Gitlab ≫ Gitlab Version0.9.1
Gitlab ≫ Gitlab Version0.9.4
Gitlab ≫ Gitlab Version0.9.6
Gitlab ≫ Gitlab Version1.0.0
Gitlab ≫ Gitlab Version1.0.1
Gitlab ≫ Gitlab Version1.0.2
Gitlab ≫ Gitlab Version1.1.0
Gitlab ≫ Gitlab Version1.2.0
Gitlab ≫ Gitlab Version1.2.1
Gitlab ≫ Gitlab Version1.2.2
Gitlab ≫ Gitlab Version2.0.0
Gitlab ≫ Gitlab Version2.1.0
Gitlab ≫ Gitlab Version2.2.0
Gitlab ≫ Gitlab Version2.3.0
Gitlab ≫ Gitlab Version2.3.1
Gitlab ≫ Gitlab Version2.4.0
Gitlab ≫ Gitlab Version2.5.0
Gitlab ≫ Gitlab Version2.6.0
Gitlab ≫ Gitlab Version2.7.0
Gitlab ≫ Gitlab Version2.8.0
Gitlab ≫ Gitlab Version2.8.1
Gitlab ≫ Gitlab Version2.9.0
Gitlab ≫ Gitlab Version2.9.1
Gitlab ≫ Gitlab Version3.0.0
Gitlab ≫ Gitlab Version3.0.1
Gitlab ≫ Gitlab Version3.0.2
Gitlab ≫ Gitlab Version3.0.3
Gitlab ≫ Gitlab Version3.1.0
Gitlab ≫ Gitlab Version4.0.0
Gitlab ≫ Gitlab Version4.1.0
Gitlab ≫ Gitlab Version4.2.0
Gitlab ≫ Gitlab Version5.0.0
Gitlab ≫ Gitlab Version5.0.1
Gitlab ≫ Gitlab Version5.1.0
Gitlab ≫ Gitlab Version5.2.0
Gitlab ≫ Gitlab Version5.3.0
Gitlab ≫ Gitlab Version5.4.0
Gitlab ≫ Gitlab SwEditioncommunity Version <= 6.2.3
Gitlab ≫ Gitlab Version0.8.0 SwEditioncommunity
Gitlab ≫ Gitlab Version0.9.1 SwEditioncommunity
Gitlab ≫ Gitlab Version0.9.4 SwEditioncommunity
Gitlab ≫ Gitlab Version0.9.6 SwEditioncommunity
Gitlab ≫ Gitlab Version1.0.0 SwEditioncommunity
Gitlab ≫ Gitlab Version1.0.1 SwEditioncommunity
Gitlab ≫ Gitlab Version1.0.2 SwEditioncommunity
Gitlab ≫ Gitlab Version1.1.0 SwEditioncommunity
Gitlab ≫ Gitlab Version1.2.0 SwEditioncommunity
Gitlab ≫ Gitlab Version1.2.1 SwEditioncommunity
Gitlab ≫ Gitlab Version1.2.2 SwEditioncommunity
Gitlab ≫ Gitlab Version2.0.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.1.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.2.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.3.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.3.1 SwEditioncommunity
Gitlab ≫ Gitlab Version2.4.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.5.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.6.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.7.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.8.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.8.1 SwEditioncommunity
Gitlab ≫ Gitlab Version2.9.0 SwEditioncommunity
Gitlab ≫ Gitlab Version2.9.1 SwEditioncommunity
Gitlab ≫ Gitlab Version3.0.0 SwEditioncommunity
Gitlab ≫ Gitlab Version3.0.1 SwEditioncommunity
Gitlab ≫ Gitlab Version3.0.2 SwEditioncommunity
Gitlab ≫ Gitlab Version3.0.3 SwEditioncommunity
Gitlab ≫ Gitlab Version3.1.0 SwEditioncommunity
Gitlab ≫ Gitlab Version4.0.0 SwEditioncommunity
Gitlab ≫ Gitlab Version4.1.0 SwEditioncommunity
Gitlab ≫ Gitlab Version4.2.0 SwEditioncommunity
Gitlab ≫ Gitlab Version5.0.0 SwEditioncommunity
Gitlab ≫ Gitlab Version5.0.1 SwEditioncommunity
Gitlab ≫ Gitlab Version5.1.0 SwEditioncommunity
Gitlab ≫ Gitlab Version5.2.0 SwEditioncommunity
Gitlab ≫ Gitlab Version5.3.0 SwEditioncommunity
Gitlab ≫ Gitlab Version5.4.0 SwEditioncommunity
Gitlab ≫ Gitlab Version5.4.1 SwEditioncommunity
Gitlab ≫ Gitlab Version5.4.2 SwEditioncommunity
Gitlab ≫ Gitlab Version6.0.0 SwEditioncommunity
Gitlab ≫ Gitlab Version6.1.0 SwEditioncommunity
Gitlab ≫ Gitlab Version6.2.0 SwEditioncommunity
Gitlab ≫ Gitlab Version6.2.1 SwEditioncommunity
Gitlab ≫ Gitlab Version6.2.2 SwEditioncommunity
Gitlab ≫ Gitlab SwEditionenterprise Version <= 6.2.0
Gitlab ≫ Gitlab Version0.8.0 SwEditionenterprise
Gitlab ≫ Gitlab Version0.9.1 SwEditionenterprise
Gitlab ≫ Gitlab Version0.9.4 SwEditionenterprise
Gitlab ≫ Gitlab Version0.9.6 SwEditionenterprise
Gitlab ≫ Gitlab Version1.0.0 SwEditionenterprise
Gitlab ≫ Gitlab Version1.0.1 SwEditionenterprise
Gitlab ≫ Gitlab Version1.0.2 SwEditionenterprise
Gitlab ≫ Gitlab Version1.1.0 SwEditionenterprise
Gitlab ≫ Gitlab Version1.2.0 SwEditionenterprise
Gitlab ≫ Gitlab Version1.2.1 SwEditionenterprise
Gitlab ≫ Gitlab Version1.2.2 SwEditionenterprise
Gitlab ≫ Gitlab Version2.0.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.1.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.2.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.3.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.3.1 SwEditionenterprise
Gitlab ≫ Gitlab Version2.4.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.5.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.6.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.7.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.8.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.8.1 SwEditionenterprise
Gitlab ≫ Gitlab Version2.9.0 SwEditionenterprise
Gitlab ≫ Gitlab Version2.9.1 SwEditionenterprise
Gitlab ≫ Gitlab Version3.0.0 SwEditionenterprise
Gitlab ≫ Gitlab Version3.0.1 SwEditionenterprise
Gitlab ≫ Gitlab Version3.0.2 SwEditionenterprise
Gitlab ≫ Gitlab Version3.0.3 SwEditionenterprise
Gitlab ≫ Gitlab Version3.1.0 SwEditionenterprise
Gitlab ≫ Gitlab Version4.0.0 SwEditionenterprise
Gitlab ≫ Gitlab Version4.1.0 SwEditionenterprise
Gitlab ≫ Gitlab Version4.2.0 SwEditionenterprise
Gitlab ≫ Gitlab Version5.0.0 SwEditionenterprise
Gitlab ≫ Gitlab Version5.0.1 SwEditionenterprise
Gitlab ≫ Gitlab Version5.1.0 SwEditionenterprise
Gitlab ≫ Gitlab Version5.2.0 SwEditionenterprise
Gitlab ≫ Gitlab Version5.3.0 SwEditionenterprise
Gitlab ≫ Gitlab Version5.4.0 SwEditionenterprise
Gitlab ≫ Gitlab Version5.4.1 SwEditionenterprise
Gitlab ≫ Gitlab Version5.4.2 SwEditionenterprise
Gitlab ≫ Gitlab Version6.0.0 SwEditionenterprise
Gitlab ≫ Gitlab Version6.1.0 SwEditionenterprise
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.275
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.