Known Vulnerabilities for products from Onedev Project
Listed below are 17 of the newest known vulnerabilities associated with the vendor "Onedev Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-11440 json | Not Provided | 2026-06-06 | 2026-06-08 | |
| CVE-2026-11439 json | Not Provided | 2026-06-06 | 2026-06-08 | |
| CVE-2026-11438 json | Not Provided | 2026-06-06 | 2026-06-08 | |
| CVE-2023-24828 json | Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate access t... | 8.8 - HIGH | 2023-02-08 | 2023-02-16 |
| CVE-2022-39208 json | Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. All files in the /opt/onedev/sites/ directory are exp... | 7.5 - HIGH | 2022-09-13 | 2022-10-01 |
| CVE-2022-39207 json | Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. During CI/CD builds, it is possible to save build art... | 5.4 - MEDIUM | 2022-09-13 | 2023-07-13 |
| CVE-2022-39206 json | Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. When using Docker-based job executors, the Docker soc... | 9.9 - CRITICAL | 2022-09-13 | 2022-10-01 |
| CVE-2022-39205 json | Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. In versions of Onedev prior to 7.3.0 unauthenticated ... | 9.8 - CRITICAL | 2022-09-13 | 2022-10-01 |
| CVE-2022-38301 json | Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via ... | 8.8 - HIGH | 2022-09-14 | 2022-09-16 |
| CVE-2021-32651 json | OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions 4.4.... | 4.3 - MEDIUM | 2021-06-01 | 2021-06-16 |
| CVE-2021-21251 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical "zip slip" vulnerability. This is... | 8.8 - HIGH | 2021-01-15 | 2021-01-21 |
| CVE-2021-21250 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to ... | 6.5 - MEDIUM | 2021-01-15 | 2021-01-21 |
| CVE-2021-21249 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is an issue involving YAML parsing which can l... | 8.8 - HIGH | 2021-01-15 | 2022-04-26 |
| CVE-2021-21248 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the buil... | 8.8 - HIGH | 2021-01-15 | 2022-10-19 |
| CVE-2021-21247 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the application's BasePage registers an AJAX event l... | 8.8 - HIGH | 2021-01-15 | 2021-01-21 |
| CVE-2021-21246 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the REST UserResource endpoint performs a security c... | 7.5 - HIGH | 2021-01-15 | 2021-01-21 |
| CVE-2021-21245 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet also saves user controlled d... | 9.8 - CRITICAL | 2021-01-15 | 2021-01-21 |
| CVE-2021-21244 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth serve... | 9.8 - CRITICAL | 2021-01-15 | 2022-10-19 |
| CVE-2021-21243 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that ... | 9.8 - CRITICAL | 2021-01-15 | 2021-01-21 |
| CVE-2021-21242 json | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to ... | 9.8 - CRITICAL | 2021-01-15 | 2021-01-21 |
Known software with vulnerabilities from Onedev Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Onedev Project | Onedev | 2.0.0 |