CVE-2014-6275

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk private data in FusionForge...

CVE-2018-10917

pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories...

PT-2018-10181 · Pulp · Pulp

Name of the Vulnerable Software and Affected Versions: pulp versions 2.16.x and earlier Description: The issue is related to improper path parsing, allowing a malicious user or a malicious iso feed repository to write to locations accessible to the 'apache' user. This could lead to the overwrite ...