CVE-2024-45309 — OneDev vulnerable to arbitrary file reading for unauthenticated user
OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDe…
Published: 2024-10-21 · CVSS: 8.7 · CVSS 4.0
OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7