CVE-2007-1788: Flyspray

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Flyspray 0.9.9, when output_buffering is disabled or "set to a low value," allows remote attackers to bypass authentication via a crafted post request.

Affected products

• Flyspray Flyspray: version 0.9.9 only

Published 2007-03-31. Last modified 2026-06-16.