BOINC/boinc

Releases902

Frequency1 week 1 day

Last Release 14 days ago

Stars2.41K

Open-source software for volunteer computing and grid computing.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-1000875 ↗	Dec 20, 2018Thursday, 20 December 2018, 17:29	9.8 CRITICAL	7.5 HIGH
Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance Page that can result in Access to any user account. This attack appear to be exploitable via Specially crafted URL. This vulnerability appears to have been fixed in 1.0.3.