CVE-2017-14944 Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.
HighCVSS 7.5
EPSS 0.86%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inedo proget | <= 4.7.13 | No fix listed |
References
- inedo.com vendor-advisory