Approved changes feed: RSS · Atom
cpe:2.3:a:fossil-scm:fossil:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Fossil Scm (d2a97783-4805-5fe7-836f-4a56626f6543) |
|---|---|
| Product | Fossil (c1fcc7bf-2b42-54b2-95d2-d61036a6745f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/fossil |
purl2cpe | 2026-06-01 10:17:00.262453 |
pkg:deb/ubuntu/fossil |
purl2cpe | 2026-06-01 10:17:00.262456 |
pkg:github/drhsqlite/fossil-mirror |
purl2cpe | 2026-06-01 10:17:00.262458 |
pkg:github/wilsoncrespo/fossil_scm |
purl2cpe | 2026-06-01 10:17:00.262461 |
pkg:rpm/fedora/fossil |
purl2cpe | 2026-06-01 10:17:00.262464 |
pkg:rpm/opensuse/fossil |
purl2cpe | 2026-06-01 10:17:00.262467 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36377 |
vulnerable | 2026-06-08 05:32:52.174092 |
Details available
Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.
Published: 2021-07-12T12:11:49.000Z
Updated: 2024-08-04T00:54:51.436Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24614 |
vulnerable | 2026-06-08 05:22:35.039415 |
Details available
Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. An attacker must have check-in privileges on the repository.
Published: 2020-08-25T13:36:43.000Z
Updated: 2024-08-04T15:19:08.614Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.