Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2014-0468

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
debian

Description

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...). This issue affects fusionforge: before 5.3+20140506.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

fusionforge fusionforge

Default version status: unaffected

  • 0 to < 5.3+20140506affected

References