Login Request a demo
FO
Product
Fossil
by Fossil Scm · last CVE Jul 28, 2022
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fossil to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-24614
8.8
3%
Aug 25
Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code
Affected: before 2.10.2; 2.11.0 before 2.11.2; 2.12.0 before 2.12.1
CVE-2017-17459
8.8
3%
Dec 7
http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash…
Affected: before 2.4
CVE-2021-36377
7.5
1%
Jul 12
Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation
Affected: before 2.14.2; 2.15.0 before 2.15.2
Showing 3