Total vulnerabilities in the database
Flyspray 0.9.9 allows remote attackers to obtain sensitive information (private project summaries) via direct requests.
CVSS v2:
No CWE or OWASP classifications available.