CVE-2002-0094: Fraunhofer Fit Bscw

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.

Affected products

• Fraunhofer Fit Bscw: version 3.4 only; version 4.0 only

Published 2002-03-25. Last modified 2026-06-16.