CVE-2013-4490

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote…

published May 13, 2014

CVSS
—
EPSS
42%
Percentile
98.7
In the wild
Unconfirmed
What it is

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.42139 · 98.7th percentile
Published
2014-05-13T15:00Z
EPSS history
Timeline
  • 13 MAY 15:00Z
    The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote…
    cvelistv5