Default credentials

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk private data in FusionForge...

PT-2020-7724

Name of the Vulnerable Software and Affected Versions FusionForge versions prior to 5.3.2 Description The issue allows users to incorrectly access on-disk private data due to the use of scripts running under the shared Apache user, which is also used by project homepages by default. This can occu...