CVE-2013-4490
published 2014-05-13CVE-2013-4490: The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote…
PriorityP358medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
42.14%
98.5th percentile
The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab-shell | <= 1.7.2 | — |
| gitlab | gitlab-shell | — | — |
| gitlab | gitlab-shell | — | — |
| gitlab | gitlab-shell | — | — |
| gitlab | gitlab-shell | — | — |
| gitlab | gitlab-shell | — | — |
| gitlab | gitlab-shell | — | — |
| gitlab | gitlab-shell | — | — |
| gitlab | gitlab-shell | — | — |
| gitlab | gitlab-shell | — | — |
CVSS provenance
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_debian6.5LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9hhr-gwc7-jcvh: The SSH key upload feature (lib/gitlab_keys
ghsa_unreviewed·2022-05-17
CVE-2013-4490 [MEDIUM] GHSA-9hhr-gwc7-jcvh: The SSH key upload feature (lib/gitlab_keys
The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
GitLab
CVE-2013-4490: The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote a
vendor_gitlab·2014-05-13·CVSS 6.5
CVE-2013-4490 [MEDIUM] CVE-2013-4490: The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote a
CVE-2013-4490: The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
Debian
CVE-2013-4490: gitlab - The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as...
vendor_debian·2013·CVSS 6.5
CVE-2013-4490 [MEDIUM] CVE-2013-4490: gitlab - The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as...
The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.
Scope: local
sid: resolved
No detection rules found.
Exploit-DB
Gitlab-shell - Code Execution (Metasploit)
exploitdb·2014-08-19
CVE-2013-4490 Gitlab-shell - Code Execution (Metasploit)
Gitlab-shell - Code Execution (Metasploit)
---
##
# This module requires Metasploit: http//metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
require 'msf/core'
require 'net/ssh'
class Metasploit3 'Gitlab-shell Code Execution',
'Description' => %q(
This module takes advantage of the addition of authorized
ssh keys in the gitlab-shell functionality of Gitlab. Versions
of gitlab-shell prior to 1.7.4 used the ssh key provided directly
in a system call resulting in a command injection vulnerability. As
this relies on adding an ssh key to an account valid credentials
are required to exploit this vulnerability.
),
'Author' =>
[
'Brandon Knight'
],
'License' => MSF_LICENSE,
'References' =>
[
['URL', 'https://about.gitlab.com/2013/11/04/gitlab-ce-6-2-an
Metasploit
Gitlab-shell Code Execution
metasploit
Gitlab-shell Code Execution
Gitlab-shell Code Execution
This module takes advantage of the addition of authorized ssh keys in the gitlab-shell functionality of Gitlab. Versions of gitlab-shell prior to 1.7.4 used the ssh key provided directly in a system call resulting in a command injection vulnerability. As this relies on adding an ssh key to an account, valid credentials are required to exploit this vulnerability.
No writeups or analysis indexed.
2014-05-13
Published