CVE-2017-9800

A shell command injection flaw related to the handling of “svn+ssh” URLs has been discovered in Subversion. An attacker could use this flaw to execute shell commands with the privileges of the user running the Subversion client, for example when performing a “checkout” or “update” action on a malicious repository, or a legitimate repository containing a malicious commit.

Mitigation

There are various methods available to mitigate this issue. For further information, please refer to the Subversion advisory available at:
<https://subversion.apache.org/security/CVE-2017-9800-advisory.txt&gt;