Skip to content
OpenAdvisories

Vendor

theonedev

23 known vulnerabilities.

Products

onedev 23
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2024-45309 Public exploit Scanner template EPSS 25%

    OneDev vulnerable to arbitrary file reading for unauthenticated user

    OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9.

    theonedev onedev