Skip to content
OpenAdvisories

Vendor

theonedev

23 known vulnerabilities.

Products

onedev 23
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.3
    CVE-2026-49248

    OneDev: RCE through absolute-path symlink following allows low-privileged users to overwrite arbitrary server via TarUtils.untar

    OneDev is a Git server with CI/CD, kanban, and packages. In versions 15.0.6 and below, TarUtils.untar() creates symbolic links verbatim from TAR entry getLinkName() without validating whether the target is an absolute path. A subsequent file entry in the same…

    theonedev onedev
  • High 7.1
    CVE-2026-44647

    OneDev: Path Traversal (read capability via Git LFS pointer resolution)

    OneDev is a Git server with CI/CD, kanban, and packages. Prior to 15.0.2, there is behavior that breaks the expected boundary between repository-controlled LFS metadata and server-local filesystem paths. A repository object can steer raw blob reads to arbitra…

    theonedev onedev
  • High 8.7
    CVE-2024-45309 Public exploit Scanner template EPSS 25%

    OneDev vulnerable to arbitrary file reading for unauthenticated user

    OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9.

    theonedev onedev
  • High 8.1
    CVE-2023-24828

    Use of Cryptographically Weak Pseudo-Random Number Generator in Onedev

    Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate access token and password reset keys was not cryptographically secure. Existing normal users (or everyone if it allows self-registration) may …

    theonedev onedev
  • High 7.5
    CVE-2022-39208

    Git Repository Disclosure in Onedev

    Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. All files in the /opt/onedev/sites/ directory are exposed and can be read by unauthenticated users. This directory contains all projects, including their bare git repos and build artifact…

    theonedev onedev
  • High 8.6
    CVE-2021-21246 Scanner template EPSS 49%

    Pre-Auth Access token leak

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the REST UserResource endpoint performs a security check to make sure that only administrators can list user details. However for the `/users/{id}` endpoint there are no security checks …

    theonedev onedev
  • High 7.7
    CVE-2021-21250

    Post-Auth External Entity Expansion (XXE)

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to arbitrary file read. When BuildSpec is provided in XML format, the spec is processed by XmlBuildSpecMigrator.migrate(buildSpecString);…

    theonedev onedev
  • High 7.7
    CVE-2021-21251 EPSS 13%

    ZipSlip Arbitrary File Upload

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical "zip slip" vulnerability. This issue may lead to arbitrary file write. The KubernetesResource REST endpoint untars user controlled data from the request body using Tar…

    theonedev onedev