HIGH

CVE-2013-4583

Gitlab GitLab 2020-01-28 CVSS v3.1

CVSS

8.8

Description

The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories.

Weakness (CWE)

CWE-269 Improper Privilege Management

EPSS Score

Probability of exploitation in next 30 days

79.8th percentile

References

http://www.openwall.com/lists/oss-security/2013/11/15/4 Mailing List, Third Party Advisory https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/ Permissions Required https://www.openwall.com/lists/oss-security/2013/11/18/4 Mailing List, Patch, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE