What’s Vulnerable › Vulnerabilities

CVE-2013-4580

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-05-12 · updated 2026-06-16
• Weakness: CWE-287

Description

GitLab before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1, when using a MySQL backend, allows remote attackers to impersonate arbitrary users and bypass authentication via unspecified API calls.

Affected products

• GitLab: through 5.4.1; through 6.2.3; through 6.2.0; 0.8.0, 0.9.1, 0.9.4, 0.9.6, 1.0.0, 1.0.1 (+39)

References

• http://www.openwall.com/lists/oss-security/2013/11/15/4
• https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/
• http://www.openwall.com/lists/oss-security/2013/11/15/4
• https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/

Get alerted when CVE-2013-4580 or the next vulnerability affects your stack