CVE-2013-4582

Katalog CVE

CVSS 6.5 · Medium EPSS 1,9%

Kerentanan Inclusion of Functionality from Untrusted Control Sphere pada gitlab, gitlab-shell. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.

Rincian

Terbit di NVD

28 Januari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-829: Inclusion of Functionality from Untrusted Control Sphere

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 79,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2013/11/15/4 mailing list · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2013/11/18/4 mailing list · advisory pihak ketiga
• https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/ permissions required