Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2013-4582

UNKNOWN
Published 2020-01-28T15:17:23
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2013-4582. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

GitLab

GitLab

Affected Versions:

5.0 before 5.4.2
GitLab

GitLab Community Edition

Affected Versions:

before 6.2.4
GitLab

GitLab Enterprise Edition

Affected Versions:

before 6.2.1
GitLab

gitlab-shell

Affected Versions:

before 1.7.8

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-wpgv-98gg-67q7

Advisory Details

The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.

CVSS Scoring

CVSS Score

5.0

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2013-4582
WEB https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab
WEB https://www.openwall.com/lists/oss-security/2013/11/18/4
WEB http://www.openwall.com/lists/oss-security/2013/11/15/4

Advisory provided by GitHub Security Advisory Database. Published: May 5, 2022, Modified: May 5, 2022

References

http://www.openwall.com/lists/oss-security/2013/11/15/4
https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/
https://www.openwall.com/lists/oss-security/2013/11/18/4
Published: 2020-01-28T15:17:23
Last Modified: 2024-08-06T16:45:15.169Z
Copied to clipboard!