Skip to content
OpenAdvisories

Vendor

theonedev

23 known vulnerabilities.

Products

onedev 23
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.9
    CVE-2022-39206

    CI/CD Docker Escape in OneDev

    Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. When using Docker-based job executors, the Docker socket (e.g. /var/run/docker.sock on Linux) is mounted into each Docker step. Users that can define and trigger CI/CD jobs on a project c…

    theonedev onedev
  • Critical 9.0
    CVE-2022-39205

    Access Control Bypass in Onedev

    Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. In versions of Onedev prior to 7.3.0 unauthenticated users can take over a OneDev instance if there is no properly configured reverse proxy. The /git-prereceive-callback endpoint is used …

    theonedev onedev
  • Critical 10.0
    CVE-2021-21245

    Pre-Auth Arbitrary File Upload

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet also saves user controlled data (`request.getInputStream()`) to a user specified location (`request.getHeader("File-Name")`). This issue may lead to arbitrary fil…

    theonedev onedev
  • Critical 9.6
    CVE-2021-21247

    Post-Auth Unsafe Deserialization on BasePage (AJAX)

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the application's BasePage registers an AJAX event listener (`AbstractPostAjaxBehavior`) in all pages other than the login page. This listener decodes and deserializes the `data` query p…

    theonedev onedev
  • Critical 9.6
    CVE-2021-21249

    Post-Auth Unsafe Yaml deserialization

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is an issue involving YAML parsing which can lead to post-auth remote code execution. In order to parse and process YAML files, OneDev uses SnakeYaml which by default (when not usi…

    theonedev onedev
  • Critical 9.6
    CVE-2021-21248

    Post-Auth Arbitrary Code execution via Groovy script injection

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the build endpoint parameters. InputSpec is used to define parameters of a Build spec. It does so by using dynamically generated Groovy classe…

    theonedev onedev
  • Critical 10.0
    CVE-2021-21242 EPSS 74%

    Pre-Auth Unsafe Deserialization on AttachmentUploadServet

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to pre-auth remote code execution. AttachmentUploadServlet deserializes untrusted data from the `Attachment-Support` header. This Servlet…

    theonedev onedev
  • Critical 10.0
    CVE-2021-21243 EPSS 54%

    Pre-Auth Unsafe Deserialization on KubernetesResource

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deserialize untrusted data from the request body. These endpoints do not enforce any authentication or authorization checks. This issu…

    theonedev onedev
  • Critical 10.0
    CVE-2021-21244

    Pre-Auth SSTI via Bean validation message tampering

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection via Bean validation message tampering. Full details in the reference GHSA. This issue was fixed in 4.0.3 by …

    theonedev onedev