Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: fusionforge Component: Fusionforge Clear all filters
TI-2014-00447 CVE-2014-0468 · GHSA-h5cq-458f-fp6j

Unrestricted file upload in fusionforge

Priority MEDIUM 49

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00516 Published 2025-06-26 Fixed in 5.3+20140506 CWE-434
TI-2014-05161 CVE-2014-6275 · GHSA-q465-4cr6-rp76

Information disclosure in Red Hat FusionForge

Priority LOW 28

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00944 Published 2020-01-02 Fixed in 5.3.2 CWE-200
TI-2013-01242 CVE-2013-1423 · GHSA-f3gf-w5h5-pc5j

(1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3)…

Priority LOW 31

(1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3) deb-specific/fileforge.pl, (4) deb-specific/group_dump_update.pl, (5) deb-specific/ssh_dump_update.pl, (6) deb-specific/user_dump_update.pl, (7) plugi…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00374 Published 2013-03-12 No fix listed CWE-59