CVE-2017-15608

Inedo ProGet is affected by a CSRF vulnerability in versions before 5.0 Beta5, enabling an attacker to change advanced settings. The issue is documented across multiple sources (NVD/NVD3/OpenVAS) with CVSS metrics: CVSSv3 base score 6.5 (I:H) and CVSSv2 base score 4.3 (I:P). Root cause is a cross...

CVE-2017-14944

Inedo ProGet is affected by CVE-2017-14944, with versions prior to 4.7.14 vulnerable due to improper handling of dangerous package IDs during package addition (PG-1060). The issue is scoped to Inedo ProGet before 4.7.14; exploitation details are not provided in the supplied documents. Remediation...