CVE-2014-6275

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk private data in FusionForge...

CVE-2014-6275

CVE-2014-6275 affects FusionForge prior to version 5.3.2. The vulnerability arises because FusionForge uses scripts that run under the shared Apache user, which is also used by project homepages by default. When project webpages reside on the same server as FusionForge, this can allow users to ac...

CVE-2014-6275

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk private data in FusionForge...

PT-2020-7724

Name of the Vulnerable Software and Affected Versions FusionForge versions prior to 5.3.2 Description The issue allows users to incorrectly access on-disk private data due to the use of scripts running under the shared Apache user, which is also used by project homepages by default. This can occu...

CVE-2014-6275: Exposure of Sensitive Information to an Unauthorized Actor

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk private data in FusionForge...

Fedora Update for fusionforge FEDORA-2015-9324

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : fusionforge-5.3.2-4.fc22 (2015-9324)

Security fix for CVE-2015-0850 CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 21 : fusionforge-5.3.2-4.fc21 (2015-9128)

Security fix for CVE-2015-0850 CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora Update for fusionforge FEDORA-2015-9128

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: fusionforge-5.3.2-4.fc22

FusionForge provides many tools to aid collaboration in a development project, such as bug-tracking, task management, mailing-lists, SCM repository, forums, support request helper, web/FTP hosting, release management, etc. All these services are integrated into one web site and managed through a...

[SECURITY] Fedora 21 Update: fusionforge-5.3.2-4.fc21

FusionForge provides many tools to aid collaboration in a development project, such as bug-tracking, task management, mailing-lists, SCM repository, forums, support request helper, web/FTP hosting, release management, etc. All these services are integrated into one web site and managed through a...

[SECURITY] [DSA 3275-1] fusionforge security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3275-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 30, 2015 http://www.debian.org/security/faq -...

FusionForge Git plugin is vulnerable

FusionForge is a collaborative team development environment , its main features include communication tools such as forums , news , etc. , development tools such as bug tracking , project management , etc. and community tools such as file distribution , software classification , etc..Git is one o...

CVE-2015-0850

The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository...

CVE-2015-0850

The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository...

Code injection

The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository...

CVE-2015-0850

The CVE-2015-0850 entry pertains to FusionForge’s Git plugin prior to 6.0rc4, where a vulnerability in the Git repository-creation parameter path allows remote arbitrary code execution. Affected component: FusionForge Git plugin (before 6.0rc4). Root cause: inadequate input handling when creating...

CVE-2015-0850

The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository...

CVE-2015-0850

The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository...

CVE-2015-0850: Improper Input Validation

The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository...