CVE-2024-45309

CVSS V2 None CVSS V3 None

Description

OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9.

Overview

CVE ID
CVE-2024-45309

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-10-21T14:55:18.293Z

Last Modified Date
2024-10-21T19:16:02.326Z

Weakness Enumerations

CWE	URL
CWE-200	http://cwe.mitre.org/data/definitions/200.html

References

Reference URL	Reference Tags
https://github.com/theonedev/onedev/security/advisories/GHSA-7wg5-6864-v489	x_refsource_CONFIRM
https://github.com/theonedev/onedev/commit/4637aaac8c70d41aa789b7fce208b75c6a7b711f	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-45309
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45309

History

Created	Old Value	New Value	Data Type	Notes
2024-10-22 13:25:36				Added to TrackCVE