CVE-2013-1423: (1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3) deb-specific/fileforge.pl, (4) deb-sp...

Security readout for executives and security teams

CVE-2013-1423 affects FusionForge 5.0, 5.1, and 5.2. A user who already has local access to the server could abuse unsafe file handling across multiple scripts to alter file permissions, read sensitive data, or cause other impacts. It is mainly a risk for shared or multi-user FusionForge hosts. Exposure is likely limited to systems running FusionForge 5.0, 5.1, or 5.2 where untrusted or semi-trusted users can obtain local shell, project, SCM, or filesystem-level access. Prioritize remediation if FusionForge is still deployed on shared infrastructure or reachable by many internal users. For isolated, retired, or single-admin systems, urgency is lower but patch verification is still warranted because privilege escalation can undermine server trust boundaries. Mitigation focus: Inventory FusionForge servers and confirm whether versions 5.0, 5.1, or 5.2 are present.; Apply the Debian or FusionForge updates referenced by DSA-2633 and upstream commits.; Restrict local shell and filesystem access to trusted administrators until patched..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.