Not rated
CVE-2013-4583 The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise…
Description
The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GitLab | Versions not published | |
| GitLab Community Edition | Versions not published | |
| GitLab Enterprise Edition | Versions not published | |
| gitlab-shell | Versions not published |
References
- www.openwall.com www.openwall.com
- www.gitlab.com www.gitlab.com
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of GitLab
The 1114 CVEs of GitLab →
CVE-2026-110264
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10,…
10.0
Critical
CVE-2026-12664
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and…
6.8
Medium
CVE-2026-13319
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3,…
4.3
Medium
CVE-2026-14288
GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5…
3.1
Low