{"id":"UBUNTU-CVE-2014-0468","details":"Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...). This issue affects fusionforge: before 5.3+20140506.","modified":"2025-07-16T08:10:53.550593Z","published":"2025-06-26T21:15:00Z","withdrawn":"2025-07-18T16:42:58Z","upstream":["CVE-2014-0468"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2014-0468"},{"type":"REPORT","url":"http://lists.fusionforge.org/pipermail/fusionforge-general/2014-March/002645.html"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2014-0468"}],"affected":[{"package":{"name":"fusionforge","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/fusionforge@6.0.2+20150708-1?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2+20150708-1"}]}],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"fusionforge","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-common","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-db-local","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-db-remote"},{"binary_name":"fusionforge-lists","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-mta-exim4","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-mta-postfix","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-admssw","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-authcas","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-authhttpd","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-authldap","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-blocks","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-compactpreview","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-plugin-contribtracker"},{"binary_name":"fusionforge-plugin-doaprdf","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-extsubproj","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-foafprofiles","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-plugin-globalsearch"},{"binary_name":"fusionforge-plugin-gravatar","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-headermenu","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-hudson","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-mediawiki","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-message","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-moinmoin","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-projectlabels","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmarch","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmbzr","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmcvs","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmdarcs","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmgit","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmhg","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmhook","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmsvn","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-sysauthldap","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-taskboard","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-plugin-webanalytics"},{"binary_name":"fusionforge-scm","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-shell"},{"binary_name":"fusionforge-web","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-web-vhosts","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-common","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-db-postgresql","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-db-remote","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-lists-mailman","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-mta-exim4","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-mta-postfix","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-shell-postgresql","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-web-apache2","binary_version":"6.0.2+20150708-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-0468.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}