CVE-2014-6275

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk private data in FusionForge.

• CWE-200

• http://lists.fusionforge.org/pipermail/fusionforge-general/2014-September/002824.htmlMailing List, Tool Signature
• https://security-tracker.debian.org/tracker/CVE-2014-6275Third Party Advisory
• http://lists.fusionforge.org/pipermail/fusionforge-general/2014-September/002824.htmlMailing List, Tool Signature
• https://security-tracker.debian.org/tracker/CVE-2014-6275Third Party Advisory

Published

Jan 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-6269Multiple integer overflows in the http_request_forward_body …
• CVE-2014-6270Off-by-one error in the snmpHandleUdp function in snmp_core.…
• CVE-2014-6271GNU Bash through 4.3 processes trailing strings after functi…9.8
• CVE-2014-6272Multiple integer overflows in the evbuffer API in Libevent 1…
• CVE-2014-6273Buffer overflow in the HTTP transport code in apt-get in APT…
• CVE-2014-6274git-annex had a bug in the S3 and Glacier remotes where if e…7.5
• CVE-2014-6276schema.py in Roundup before 1.5.1 does not properly limit at…
• CVE-2014-6277GNU Bash through 4.3 bash43-026 does not properly parse func…
• CVE-2014-62771Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-6278GNU Bash through 4.3 bash43-026 does not properly parse func…8.8
• CVE-2014-6280Multiple cross-site scripting (XSS) vulnerabilities in OSCla…
• CVE-2014-6283SAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP…