gitlab gitlab-shell 1.6.0
Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab-shell:1.6.0:*:*:*:*:*:*:*
part: a version: 1.6.0 update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab Shell (7dbc690a-6d26-5eed-9424-370abf39e288) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/gitlab-shell |
purl2cpe | 2026-06-01 10:14:46.066316 |
pkg:deb/ubuntu/gitlab-shell |
purl2cpe | 2026-06-01 10:14:46.066317 |
pkg:github/gitlabhq/gitlab-shell |
purl2cpe | 2026-06-01 10:14:46.066318 |
pkg:gitlab/gitlab-org/gitlab-shell |
purl2cpe | 2026-06-01 10:14:46.066320 |
pkg:rpm/opensuse/gitlab-shell |
purl2cpe | 2026-06-01 10:14:46.066321 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-4581 |
vulnerable | 2026-06-03 14:33:18.288302 |
Details available
GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH.
Published: 2014-05-12T14:00:00.000Z
Updated: 2024-08-06T16:45:14.854Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4546 |
vulnerable | 2026-06-03 14:33:17.991264 |
Details available
The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.
Published: 2014-05-13T15:00:00.000Z
Updated: 2024-08-06T16:45:15.033Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4490 |
vulnerable | 2026-06-03 14:33:17.214424 |
Details available
The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
Published: 2014-05-13T15:00:00.000Z
Updated: 2024-08-06T16:45:14.763Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.