CVE-2014-0468

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...). This issue affects fusionforge: before 5.3+20140506.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@debian.org

Published

2025-06-26

Last modified

2025-06-27

Weaknesses

CWE-434

Affected products

• Fusionforge (Fusionforge)

References

• http://lists.fusionforge.org/pipermail/fusionforge-general/2014-March/002645.html
• https://web.archive.org/web/20151019035734/http://lists.fusionforge.org/pipermail/fusionforge-general/2014-March/002645…