Improper input validation in Fusionforge

CVE-2015-0850

The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.

Affected products

Fusionforge
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

security@debian.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
security@debian.org (vendor-advisory, x_refsource_DEBIAN)