CVE-2018-25332 | GitBucket 4.23.1 contains an unauthenticated remote code exe… | CVSS 9.8 CRITICAL

Description

GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality. Attackers can brute-force the Blowfish encryption key, upload a malicious JAR plugin via the git-lfs endpoint, and execute system commands through an exposed exploit endpoint.

Metadata

CVE ID: CVE-2018-25332
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-05-17 11:48 UTC
Published: 2026-05-17 12:11 UTC
Last updated: 2026-05-18 17:56 UTC
Primary CWE: CWE-306
Missing Authentication for Critical Function
Vendor / Product: gitbucket / GitBucket
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
gitbucket	GitBucket	—	4.23.1

Weakness (CWE)

CWE	Source	Description
CWE-306	cna	Missing Authentication for Critical Function

CVSS scores (2)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References (4)

ExploitDB-44668 https://www.exploit-db.com/exploits/44668
Official Product Homepage https://security.szurek.pl/
Product Reference https://github.com/gitbucket/gitbucket
VulnCheck Advisory: GitBucket 4.23.1 Unauthenticated Remote Code Execution https://www.vulncheck.com/advisories/gitbucket-unauthenticated-remote-code-execution