Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hhr-gwc7-jcvh

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.

EPSS

Процентиль: 98%
0.48021
Средний

Связанные уязвимости

nvd
около 11 лет назад

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the public key.

debian
около 11 лет назад

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before ...

EPSS

Процентиль: 98%
0.48021
Средний