Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-4546
HistoryMay 13, 2014 - 3:55 p.m.

CVE-2013-4546

2014-05-1315:55:04
Debian Security Bug Tracker
security-tracker.debian.org
5

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.4%

The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.

OSVersionArchitecturePackageVersionFilename
Debian999allgitlab< 16.8.4-1gitlab_16.8.4-1_all.deb

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.4%

Related for DEBIANCVE:CVE-2013-4546