CVE-2013-4546

The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.

Score

CVSS 2.0 6.5 Medium

Status

Modified - secalert@redhat.com

Published

2014-05-13

Last modified

2024-08-06

Affected products

• Gitlab (Gitlab)
• Gitlab-shell (Gitlab)

References

• http://www.openwall.com/lists/oss-security/2013/11/11/2
• https://gitlab.com/gitlab-org/gitlab-shell/blob/master/CHANGELOG
• https://www.gitlab.com/2013/11/08/security-vulnerability-in-gitlab-shell/