CVE-2013-4489

Published: May 17, 2014Modified: May 6, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands, as demonstrated by the search box for the GitLab code search feature.

Affected (8)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	Version 5.2.0
Gitlab Gitlab	Version 5.3.0
Gitlab Gitlab	Version 5.4.0
Gitlab Gitlab	Version 6.0.0
Gitlab Gitlab	Version 6.1.0
Gitlab Gitlab	Version 6.2.0
Gitlab Gitlab	Version 6.2.1
Gitlab Gitlab	Version 6.2.2

References (2)

https://www.gitlab.com/2013/11/04/gitlab-ce-6-2-and-5-4-security-release/

Source: secalert@redhat.com

PatchVendor Advisory

https://www.gitlab.com/2013/11/04/gitlab-ce-6-2-and-5-4-security-release/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.