Read the docs

fusionforge

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

fusionforge records in CISA KEV

No fusionforge vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fusionforge 4 records MEDIUM

Records

4 records in Fusionforge · all components

TI-2014-00447 CVE-2014-0468 · GHSA-h5cq-458f-fp6j

Unrestricted file upload in fusionforge

Priority MEDIUM 49

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00516 Published 2025-06-26 Fixed in 5.3+20140506 CWE-434
TI-2013-01242 CVE-2013-1423 · GHSA-f3gf-w5h5-pc5j

(1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3)…

Priority LOW 31

(1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3) deb-specific/fileforge.pl, (4) deb-specific/group_dump_update.pl, (5) deb-specific/ssh_dump_update.pl, (6) deb-specific/user_dump_update.pl, (7) plugi…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00374 Published 2013-03-12 No fix listed CWE-59
TI-2014-05161 CVE-2014-6275 · GHSA-q465-4cr6-rp76

Information disclosure in Red Hat FusionForge

Priority LOW 28

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00944 Published 2020-01-02 Fixed in 5.3.2 CWE-200
Open these records in search →