DSA-1698-1 gforge -- insufficient input sanitising| ID: oval:org.secpod.oval:def:600338 | Date: (C)2011-05-13 (M)2022-10-10 |
| Class: PATCH | Family: unix |
It was discovered that GForge, a collaborative development tool, insufficiently sanitises some input allowing a remote attacker to perform SQL injection. For the stable distribution , this problem has been fixed in version 4.5.14-22etch10. For the testing and unstable distribution , this problem has been fixed in version 4.7~rc2-7. We recommend that you upgrade your gforge package.
