CVE-2024-45309

Published October 21st, 2024

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9.

theonedev/onedev

Git Server with CI/CD, Kanban, and Packages. Seamless integration. Unparalleled experience.

GitHub

15.1K