Vulnerabilities > Gitlab > Gitlab Shell > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-01-28 CVE-2013-4583 Improper Privilege Management vulnerability in Gitlab and Gitlab-Shell
The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories.
network
low complexity
gitlab CWE-269
6.5
2020-01-28 CVE-2013-4582 Inclusion of Functionality from Untrusted Control Sphere vulnerability in Gitlab and Gitlab-Shell
The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.
network
low complexity
gitlab CWE-829
4.0
2014-05-13 CVE-2013-4546 Unspecified vulnerability in Gitlab and Gitlab-Shell
The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.
network
low complexity
gitlab
6.5
2014-05-13 CVE-2013-4490 Remote Code Execution vulnerability in GitLab 'SSH key upload' Feature
The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
network
low complexity
gitlab
6.5
2014-05-12 CVE-2013-4581 Code Injection vulnerability in Gitlab and Gitlab-Shell
GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH.
network
gitlab CWE-94
6.8