Skip to content

CVE-2009-4069 Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

MediumCVSS 4.3 EPSS 1.7%
Published
Updated
Exploit status
No public exploit known

Description

Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

ProductAffected versionsFixed in
gforge = 4.5.14 No fix listed
gforge = 4.7.3 No fix listed

References

  • 35458 third-party-advisory vendor-advisory
  • DSA-1818 patch vendor-advisory
  • 35424 vdb-entry