What’s Vulnerable › Vulnerabilities

CVE-2013-4581

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-05-12 · updated 2026-06-16
• Weakness: CWE-94

Description

GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH.

Affected products

• GitLab: through 6.2.3; through 6.2.0; 0.8.0, 0.9.1, 0.9.4, 0.9.6, 1.0.0, 1.0.1 (+39)
• gitlab-shell: through 1.7.7; 1.0.4, 1.1.0, 1.2.0, 1.3.0, 1.4.0, 1.5.0 (+8)

References

• http://www.openwall.com/lists/oss-security/2013/11/15/4
• https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/
• http://www.openwall.com/lists/oss-security/2013/11/15/4
• https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/

Get alerted when CVE-2013-4581 or the next vulnerability affects your stack