The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.
References
Link | Resource |
---|---|
http://www.debian.org/security/2015/dsa-3275 | |
https://fusionforge.org/forum/forum.php?forum_id=41 | Patch Vendor Advisory |
Configurations
Information
Published : 2015-06-02 07:59
Updated : 2015-06-03 06:18
NVD link : CVE-2015-0850
Mitre link : CVE-2015-0850
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
fusionforge
- fusionforge