PT-2020-7505
CVE-2013-4583
·
Published
2020-01-28
·
Updated
2020-02-03
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
GitLab versions 5.0 through 5.4.2
GitLab Community Edition versions 5.0 through 6.2.4
GitLab Enterprise Edition versions 5.0 through 6.2.1
gitlab-shell versions prior to 1.7.8
Description:
The issue allows remote authenticated users to gain privileges and clone arbitrary repositories due to a problem in the
parse cmd function.Recommendations:
For GitLab versions 5.0 through 5.4.2, update to version 5.4.2 or later.
For GitLab Community Edition versions 5.0 through 6.2.4, update to version 6.2.4 or later.
For GitLab Enterprise Edition versions 5.0 through 6.2.1, update to version 6.2.1 or later.
For gitlab-shell versions prior to 1.7.8, update to version 1.7.8 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾