Gitlab Shell

gitlab-shell

Vendor: Gitlab • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-4583 1Gitlab 2Gitlab Gitlab Shell Nov 21, 2024 Jan 28, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privil...Show more The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories.Show less
CVE-2013-4582 1Gitlab 2Gitlab Gitlab Shell Nov 21, 2024 Jan 28, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-s...Show more The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.Show less
CVE-2013-4546 1Gitlab 2Gitlab Gitlab Shell May 6, 2026 May 13, 2014 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.
CVE-2013-4490 1Gitlab 2Gitlab Gitlab Shell May 6, 2026 May 13, 2014 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharact...Show more The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.Show less
CVE-2013-4581 1Gitlab 2Gitlab Gitlab Shell May 6, 2026 May 12, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH.