Inedo Proget
3 CVEs affecting Inedo Proget. Latest disclosed: 2025-05-03. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14944 | High | 7.5 | 2017-09-30 | Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060. |
CVE-2025-47244 | High | 7.3 | 2025-05-03 | Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of… |
CVE-2017-15608 | Medium | 6.5 | 2018-09-26 | Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings. |