CVE-2013-4546: GitLab

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL.

Affected products

• GitLab GitLab: version 5.0.0 only; version 5.0.1 only; version 5.1.0 only; version 5.2.0 only; version 5.3.0 only; version 5.4.0 only; …
• GitLab GitLab-Shell: up to and including 1.7.3; version 1.0.4 only; version 1.1.0 only; version 1.2.0 only; version 1.3.0 only; version 1.4.0 only; …

Published 2014-05-13. Last modified 2026-06-16.