CVE-2026-13540

MEDIUM

GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery

Title source: cna
STIX 2.1

Description

A security flaw has been discovered in GitBucket up to 4.46.1. This affects the function Git.cloneRepository.setURI of the file src/main/scala/gitbucket/core/service/RepositoryCreationService.scala. Performing a manipulation of the argument url results in server-side request forgery. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The patch is named 487a9b980f56aa73b6a044b1e86a92eed5043215. To fix this issue, it is recommended to deploy a patch.

References (8)

Core 8
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-374548 | GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery
https://vuldb.com/vuln/374548
Signature, Permissions Required signature permissions-required
VDB-374548 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/374548/cti
Third Party Advisory third-party-advisory
CVE-2026-13540 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-13540
Third Party Advisory third-party-advisory
Submit #836108 | gitbucket 4.46.1 Server-Side Request Forgery
https://vuldb.com/submit/836108

Scores

CVSS v3 6.3
EPSS 0.0023
EPSS Percentile 13.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-918
Status published
Products (2)
None/GitBucket 4.46.0
None/GitBucket 4.46.1
Published Jun 29, 2026
Tracked Since Jun 29, 2026