The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0850
Reference (s):
- https://fusionforge.org/forum/forum.php?forum_id=41
- DEBIAN:DSA-3275
- URL: http://www.debian.org/security/2015/dsa-3275