Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-46901

Опубликовано: 09 дек. 2024
Источник: nvd
CVSS3: 3.1
EPSS Низкий

Описание

Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.

All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.

Repositories served via other access methods are not affected.

EPSS

Процентиль: 90%
0.05579
Низкий

3.1 Low

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 3.1
ubuntu
6 месяцев назад

Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue. Repositories served via other access methods are not affected.

CVSS3: 3.1
redhat
6 месяцев назад

Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue. Repositories served via other access methods are not affected.

CVSS3: 3.1
msrc
3 месяца назад

Описание отсутствует

CVSS3: 3.1
debian
6 месяцев назад

Insufficient validation of filenames against control characters in Apa ...

suse-cvrf
3 месяца назад

Security update for subversion

EPSS

Процентиль: 90%
0.05579
Низкий

3.1 Low

CVSS3

Дефекты

CWE-20