CVE-2015-0850
The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code...
CVE-2015-0850 is a high vulnerability (CVSS 10.0) in Fusionforge, published May 30, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.46%, the 91st percentile. Fixed in fusionforge 5.3.2+20141104-3+deb8u1.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 4.46%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
5.3.2+20141104-3+deb8u1fusionforge
Description
The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fusionforgeDebian:8 | before 5.3.2+20141104-3+deb8u1, plus listed versions 5.3.2+20141104-3 | 5.3.2+20141104-3+deb8u1 |
What each source reports
NVD Score used
The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.
- Record
CVE-2015-0850- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.
- Record
CVE-2015-0850- Updated
- 2026-11-02
EUVDEUVD-2015-0861No score
The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.
- Record
EUVD-2015-0861- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rcf7-7w5q-hqfgNo score
The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code...
The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.
- Record
GHSA-rcf7-7w5q-hqfg- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.