1. Home
  2. CVE Database
  3. CVE-2024-45309
HIGH · 7.5

CVE-2024-45309

OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This ...

Vulnerability Description

OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Onedev ProjectOnedev< 11.0.9

Related Weaknesses (CWE)

CWE-22CWE-200

References

FAQ

What is CVE-2024-45309?

CVE-2024-45309 is a vulnerability with a CVSS score of 7.5 (HIGH). OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This ...

How severe is CVE-2024-45309?

CVE-2024-45309 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-45309?

Check the references section above for vendor advisories and patch information. Affected products include: Onedev Project Onedev.