PT-2015-4917 · Fusionforge · Fusionforge Git Plugin

Ansgar Burchardt · Publicado 2015-05-30 · Atualizado 2015-06-03 · CVE-2015-0850

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FusionForge Git plugin versions prior to 6.0rc4

Description The issue allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.

Recommendations For versions prior to 6.0rc4, update to version 6.0rc4 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-0850

DSA-3275-1

Produtos afetados

Fusionforge Git Plugin

Referências · 8

• https://security-tracker.debian.org/tracker/DSA-3275-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3275-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/fusionforge · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0850 · Nota de Segurança
• http://debian.org/security/2015/dsa-3275 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0850 · Nota de Segurança
• https://packages.debian.org/src:fusionforge · Nota
• https://fusionforge.org/forum/forum.php?forum_id=41 · Aviso do Fabricante