CVE-2014-0468: Malicious File Upload
Published Jun 26, 2025
·Updated
Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...). This issue affects fusionforge: before 5.3+20140506.
Affected Software
2 affected components
FusionForge FusionForge<5.3+20140506
FusionForge FusionForge<5.3\+20140506.
Event History
Jun 26, 2025
CVE Published
via MITRE·08:39 PM
Data Sourced
via MITRE·08:39 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0468?
CVE-2014-0468 is classified as a high-severity vulnerability due to the risk of script execution in web servers.
2
How do I fix CVE-2014-0468?
To fix CVE-2014-0468, upgrade FusionForge to version 5.3+20140506 or later.
3
Who is affected by CVE-2014-0468?
CVE-2014-0468 affects users of FusionForge versions earlier than 5.3+20140506.
4
What is the impact of CVE-2014-0468?
The impact of CVE-2014-0468 includes the potential for unauthorized script execution from uploaded files in SCM repositories.
5
Is CVE-2014-0468 present in all versions of FusionForge?
No, CVE-2014-0468 is only present in FusionForge versions prior to 5.3+20140506.