CVE-2015-0850

FusionForge < 6.0 - Remote Code Execution via Git Plugin Secondary Repository Creation

Title source: llm

Description

The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://fusionforge.org/forum/forum.php?forum_id=41

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2015/dsa-3275

Scores

EPSS 0.0450

EPSS Percentile 90.4%

Details

CWE

CWE-20

Status published

Products (1)

fusionforge/fusionforge < 6.0

Published Jun 02, 2015

Tracked Since Feb 18, 2026