CVE-2024-34995

2024-05-2416:15:10

[email protected]

web.nvd.nist.gov

nvd

cve-2024-34995

arbitrary file deletion

dirtemps parameter

com.cym.controller.usercontroller#importover

crafted post request

7 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserController#importOver. This vulnerability allows attackers to delete arbitrary files via a crafted POST request.

References

github.com/cym1102/svnWebUI/issues/8