CVE-2026-13540

GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery

CVSS 5.3 MEDIUMEPSS 0.2%CWE-918

Vexday Risk Score

33Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 5.3EPSS 0.2%KEV nãoPoC públicaNuclei —Metasploit —Patch referenciado

Lifecycle

29 Jun 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A security flaw has been discovered in GitBucket up to 4.46.1. This affects the function Git.cloneRepository.setURI of the file src/main/scala/gitbucket/core/service/RepositoryCreationService.scala. Performing a manipulation of the argument url results in server-side request forgery. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The patch is named 487a9b980f56aa73b6a044b1e86a92eed5043215. To fix this issue, it is recommended to deploy a patch.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

n/a · GitBucket

public PoCs found — 1

cve_referencegithub.com/gitbucket/gitbucket/issues/4044unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://github.com/gitbucket/gitbucket/https://github.com/gitbucket/gitbucket/commit/487a9b980f56aa73b6a044b1e86a92eed5043215 https://github.com/gitbucket/gitbucket/issues/4044 https://github.com/gitbucket/gitbucket/pull/4056 https://vuldb.com/cve/CVE-2026-13540 https://vuldb.com/submit/836108 https://vuldb.com/vuln/374548 https://vuldb.com/vuln/374548/cti