CVE-2013-4489
1 advisory.
RubyGems/gitlab-grit CVE-2013-4489: medium
GitLab Grit Gem for Ruby contains a flaw allowing arbitrary commands to be executed
Action: Upgrade gitlab-grit to 2.6.1 or later.
bundle update gitlab-gritAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.1 | - |
Fixed versions
| 2.6.1 |
Sources
- osv: GHSA-95xq-v4m2-fq3r
- https://nvd.nist.gov/vuln/detail/CVE-2013-4489
- https://github.com/gitlabhq/grit/commit/40f33a4f4f5604c2a531a1d86901fd81ac4402c4
- https://github.com/gitlabhq/grit
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gitlab-grit/CVE-2013-4489.yml
- https://gitlab.com/gitlab-org/gitlab-grit/-/blob/v2.6.1/History.txt?ref_type=tags#L2
- https://www.gitlab.com/2013/11/04/gitlab-ce-6-2-and-5-4-security-release
CVE-2013-4489 · published · modified · JSON