2 matches found
CVE-2017-15608
Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.
CVE-2017-14944
Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.