EUVD-2017-6421

Malware in sbrugna...

CVE-2017-14944: Improper Input Validation

Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060...

CVE-2017-14944

Inedo ProGet is affected by CVE-2017-14944, with versions prior to 4.7.14 vulnerable due to improper handling of dangerous package IDs during package addition (PG-1060). The issue is scoped to Inedo ProGet before 4.7.14; exploitation details are not provided in the supplied documents. Remediation...