Fusionforge

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:fusionforge:fusionforge:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFusionforge (c6f77d7f-fde2-582a-8bda-fb9f2290b8e9)
ProductFusionforge (3f20bf14-8095-5c4a-b165-2e443eee01eb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/ubuntu/fusionforge purl2cpe 2026-06-01 10:13:26.419110
pkg:docker/fusionforge/fusionforge purl2cpe 2026-06-01 10:13:26.419113
pkg:github/fusionforge/fusionforge purl2cpe 2026-06-01 10:13:26.419116
pkg:rpm/opensuse/fusionforge purl2cpe 2026-06-01 10:13:26.419118

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6275 vulnerable 2026-06-08 05:05:57.287378 Details available
FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk private data in FusionForge.
Published: 2020-01-02T21:13:55.000Z
Updated: 2024-08-06T12:10:13.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0468 vulnerable 2026-06-08 05:05:12.907941 Details available
Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...). This issue affects fusionforge: before 5.3+20140506.
Published: 2025-06-26T20:39:24.065Z
Updated: 2025-06-27T14:39:39.531Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.