CVE-2013-4582: Medium severity gitlab vulnerability
The (1) createbranch, (2) createtag, (3) importproject, and (4) forkproject functions in lib/gitlabprojects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4582?
CVE-2013-4582 has a critical severity level due to its potential impact on information disclosure and unauthorized access.
How do I fix CVE-2013-4582?
To fix CVE-2013-4582, update GitLab to version 5.4.2 or later for Community Edition, 6.2.1 or later for Enterprise Edition, and 1.7.8 or later for GitLab Shell.
What are the affected versions for CVE-2013-4582?
CVE-2013-4582 affects GitLab versions from 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1, and GitLab Shell before 1.7.8.
Who can exploit CVE-2013-4582?
CVE-2013-4582 can be exploited by remote authenticated users who have access to the affected systems.
What types of functions are vulnerable in CVE-2013-4582?
CVE-2013-4582 affects functions related to project management, specifically create_branch, create_tag, import_project, and fork_project in GitLab.