Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:6.2.2:*:*:*:*:*:*:*

part: a version: 6.2.2 update: *

VendorGitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90)
ProductGitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitlab/gitlab-org/gitlab purl2cpe 2026-06-01 10:14:46.446853

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4546 vulnerable 2026-06-03 14:33:17.991110 Details available
The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.
Published: 2014-05-13T15:00:00.000Z
Updated: 2024-08-06T16:45:15.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4490 vulnerable 2026-06-03 14:33:17.209009 Details available
The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
Published: 2014-05-13T15:00:00.000Z
Updated: 2024-08-06T16:45:14.763Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4489 vulnerable 2026-06-03 14:33:17.206413 Details available
The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands, as demonstrated by the search box for the GitLab code search feature.
Published: 2014-05-17T20:00:00.000Z
Updated: 2024-08-06T16:45:14.836Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.