VYPR
← All advisories
Unrated severityNVD Advisory· Published May 13, 2014· Updated Jun 16, 2026

CVE-2013-4490

CVE-2013-4490

Description

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

23
  • GitLab Inc./GitLab12 versions
    cpe:2.3:a:gitlab:gitlab:5.0.0:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:gitlab:gitlab:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:5.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:5.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:6.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:6.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab:6.2.2:*:*:*:*:*:*:*
    • (no CPE)range: 5.0 < 5.4.1, 6.x < 6.2.3
  • GitLab Inc./Gitlab Shell11 versions
    cpe:2.3:a:gitlab:gitlab-shell:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:gitlab:gitlab-shell:*:*:*:*:*:*:*:*range: <=1.7.2
    • cpe:2.3:a:gitlab:gitlab-shell:1.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab-shell:1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab-shell:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab-shell:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab-shell:1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab-shell:1.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab-shell:1.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab-shell:1.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gitlab:gitlab-shell:1.7.1:*:*:*:*:*:*:*
    • (no CPE)range: <1.7.3

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.