What’s Vulnerable › Vulnerabilities

CVE-2013-4546

• Severity: medium (CVSS 6.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-05-13 · updated 2026-06-16

Description

The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.

Affected products

• GitLab: 5.0.0, 5.0.1, 5.1.0, 5.2.0, 5.3.0, 5.4.0 (+7)
• gitlab-shell: through 1.7.3; 1.0.4, 1.1.0, 1.2.0, 1.3.0, 1.4.0, 1.5.0 (+4)

References

• http://www.openwall.com/lists/oss-security/2013/11/11/2
• https://gitlab.com/gitlab-org/gitlab-shell/blob/master/CHANGELOG
• https://www.gitlab.com/2013/11/08/security-vulnerability-in-gitlab-shell/
• http://www.openwall.com/lists/oss-security/2013/11/11/2
• https://gitlab.com/gitlab-org/gitlab-shell/blob/master/CHANGELOG
• https://www.gitlab.com/2013/11/08/security-vulnerability-in-gitlab-shell/

Get alerted when CVE-2013-4546 or the next vulnerability affects your stack