Lucene search
Veracode Vulnerability DatabaseVERACODE:42525HistoryAug 06, 2023 - 11:54 p.m.
Arbitrary Code Execution
2023-08-0623:54:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
gitlab
code execution
vulnerability
attack
software
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
0.018 Low
EPSS
Percentile
88.2%
gitlab is vulnerable to Arbitrary Code Execution. The vulnerability allows an attacker inject and execute arbitrary codes to create repositories with malicious code with a specially crafted name.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
nessus
nessus
prion
prion
Code injection
2023-05-03 22:15:00
cve
cve
CVE-2023-0756
2023-05-03 22:15:16
osv
osv
BIT-gitlab-2023-0756
2024-03-06 11:12:00
CVE-2023-0756
2023-05-03 22:15:16
cvelist
cvelist
CVE-2023-0756
2023-05-03 00:00:00
nvd
nvd
CVE-2023-0756
2023-05-03 22:15:16
debiancve
debiancve
CVE-2023-0756
2023-05-03 22:15:16
ubuntucve
ubuntucve
CVE-2023-0756
2023-05-03 00:00:00
freebsd
freebsd
Gitlab -- Multiple Vulnerabilities
2023-05-02 00:00:00
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
0.018 Low
EPSS
Percentile
88.2%
Related for VERACODE:42525