CVE-2013-4583

HIGH 8.8CVE-2013-4583 · Published 28/01/2020 · updated 16/06/2026

In short

CVE-2013-4583 is a HIGH (CVSS 8.8) vulnerability affecting gitlab (gitlab), gitlab-shell (gitlab).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.8% of all vulnerabilities.
Fix: update to 5.4.2, 6.2.1, 6.2.4, 1.7.8 or later.

Package	Affected versions	Patched versions
gitlab gitlab	`≥ 5.0.0, < 5.4.2≥ 6.0.0, < 6.2.1≥ 6.0.0, < 6.2.4`	`5.4.26.2.16.2.4`
gitlab-shell gitlab	`< 1.7.8`	`1.7.8`

Description

The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories.

References

openwall.com/lists/oss-security/2013/11/15/4 · Mailing List
gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab · Permissions Required
openwall.com/lists/oss-security/2013/11/18/4 · Mailing List

More vulnerabilities in gitlab

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gitlab

≥ 5.0.0, < 5.4.2≥ 6.0.0, < 6.2.1≥ 6.0.0, < 6.2.4

5.4.26.2.16.2.4

gitlab-shell

gitlab

< 1.7.8

1.7.8

More vulnerabilities in gitlab

See all →