1.7.2

DATE	CVE	VULNERABILITY TITLE	RISK
2020-01-28	CVE-2013-4583	Improper Privilege Management vulnerability in Gitlab and Gitlab-Shell The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories. network low complexity gitlab CWE-269	6.5
2020-01-28	CVE-2013-4582	Inclusion of Functionality from Untrusted Control Sphere vulnerability in Gitlab and Gitlab-Shell The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface. network low complexity gitlab CWE-829	4.0
2014-05-13	CVE-2013-4546	Unspecified vulnerability in Gitlab and Gitlab-Shell The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL. network low complexity gitlab	6.5
2014-05-13	CVE-2013-4490	Remote Code Execution vulnerability in GitLab 'SSH key upload' Feature The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key. network low complexity gitlab	6.5
2014-05-12	CVE-2013-4581	Code Injection vulnerability in Gitlab and Gitlab-Shell GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH. network gitlab CWE-94	6.8