Gforge

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Gforge records in CISA KEV

No Gforge vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Advanced Server · all components

TI-2019-07352 CVE-2019-10016 · GHSA-3xj2-vvh3-w9jf

LOW 29

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00826 Published 2019-03-25 No fix listed CWE-79