CVE-2014-0468

critical · 9.8

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...). This issue affects fusionforge: before 5.3+20140506.

9.8

CVSS

0.5%

EPSS (exploit prob.)

41st

EPSS percentile

2025-06-26

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-434

Affected products

Vendor	Product	Affected versions
fusionforge	fusionforge	< 5.3\+20140506.

Check a specific version with /api/v1/cve/match.

References

http://lists.fusionforge.org/pipermail/fusionforge-general/2014-March/002645.html
https://web.archive.org/web/20151019035734/http://lists.fusionforge.org/pipermail/fusionforge-general/2014-March/002645.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-0468