6.8
CVE-2013-4581
- EPSS 0.74%
- Veröffentlicht 12.05.2014 14:55:05
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle secalert@redhat.com
- Teams Watchlist Login
- Unerledigt Login
GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gitlab ≫ Gitlab-shell Version <= 1.7.7
Gitlab ≫ Gitlab-shell Version1.0.4
Gitlab ≫ Gitlab-shell Version1.1.0
Gitlab ≫ Gitlab-shell Version1.2.0
Gitlab ≫ Gitlab-shell Version1.3.0
Gitlab ≫ Gitlab-shell Version1.4.0
Gitlab ≫ Gitlab-shell Version1.5.0
Gitlab ≫ Gitlab-shell Version1.6.0
Gitlab ≫ Gitlab-shell Version1.7.0
Gitlab ≫ Gitlab-shell Version1.7.1
Gitlab ≫ Gitlab-shell Version1.7.2
Gitlab ≫ Gitlab-shell Version1.7.3
Gitlab ≫ Gitlab-shell Version1.7.4
Gitlab ≫ Gitlab-shell Version1.7.5
Gitlab ≫ Gitlab-shell Version1.7.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Typ | Quelle | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.74% | 0.706 |
Quelle | Base Score | Exploit Score | Impact Score | Vector String |
---|---|---|---|---|
nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-94 Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.