Apache Subversion (Apache Software Foundation) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-12-09. Vendor: Apache Software Foundation.
CVEs of Apache Subversion
- CVE-2024-46901 - CVSS 4.3 (medium), 2024-12-09: Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with…
- CVE-2024-45720 - CVSS 8.2 (high), 2024-10-09: On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to…
- CVE-2022-24070 - CVSS 7.5 (high), 2022-04-12: Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory…
- CVE-2021-28544 - CVSS 4.3 (medium), 2022-04-12: Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured…
- CVE-2020-17525 - CVSS 7.5 (high), 2021-03-17: Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client…
- CVE-2018-11803 - CVSS 7.5 (high), 2019-02-05: Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits…
- CVE-2016-8734 - CVSS 6.5 (medium), 2017-10-16: Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused…
- CVE-2017-9800 - CVSS 9.8 (critical), 2017-08-11: A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an…
