writeups.xyz / Dangerous Import: SourceForge Patches Critical Code Vulnerability

Submitter : c2a

Date: 16 April 2024

Bounty : undisclosed

Vulnerabilities :

• Arbitrary File Read
• RCE
• Security Code Review

Programs :

• SourceForge
• Apache Allura

Authors :

• Stefan Schiller (@Scryh_)

Link :
https://www.sonarsource.com/blog/dangerous-import-sourceforge-patches-critical-code-vulnerability