CVE-2013-4582

CVE-2013-4582 affects GitLab: the functions create_branch, create_tag, import_project, and fork_project in lib/gitlab_projects.rb allow remote authenticated users to include information from local files into the metadata of a Git repository via the web interface. Affected are GitLab 5.0 up to 5.4...

CVE-2013-4583

The CVE-2013-4583 issue affects GitLab: the parse_cmd function in lib/gitlab_shell.rb (and the accompanying gitlab-shell) allows remote authenticated users to gain privileges and clone arbitrary repositories. Affected versions are GitLab 5.0 before 5.4.2, GitLab Community Edition before 6.2.4, Gi...