Lucene search
K

44 matches found

OSV
OSV
added 2022/05/11 11:3 a.m.2 views

OESA-2022-1647 subversion security update

Subversion exists to be universally recognized and adopted as an open-source, centralized version control system characterized by its reliability as a safe haven for valuable data; the simplicity of its model and usage; and its ability to support the needs of a wide variety of users and projects,...

7.5CVSS6.9AI score0.08757EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2022/05/03 12:0 a.m.18 views

SUSE SLES12 Security Update : subversion (SUSE-SU-2022:1483-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1483-1 advisory. - Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden...

7.5CVSS6.3AI score0.08757EPSS
Exploits1References8
Microsoft CVE
Microsoft CVE
added 2022/04/21 7:0 a.m.2 views

Apache Subversion SVN authz protected copyfrom paths regression

...

4.3CVSS5.7AI score0.02696EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2022/04/13 12:0 a.m.73 views

Debian DSA-5119-1 : subversion - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5119 advisory. - Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured...

7.5CVSS6.2AI score0.08757EPSS
Exploits1References8
OSV
OSV
added 2022/04/12 6:15 p.m.1 views

DEBIAN-CVE-2021-28544

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS5.3AI score0.02696EPSS
Exploits1References1
OSV
OSV
added 2022/04/12 6:15 p.m.2 views

ALPINE-CVE-2021-28544

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS6.9AI score0.02696EPSS
Exploits1References1
OSV
OSV
added 2022/04/12 6:15 p.m.37 views

CVE-2021-28544

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS2.4AI score0.02696EPSS
Exploits1References6
NVD
NVD
added 2022/04/12 6:15 p.m.16 views

CVE-2021-28544

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS0.02696EPSS
Exploits1References6
OSV
OSV
added 2022/04/12 6:15 p.m.2 views

AZL-9367 CVE-2021-28544 affecting package subversion for versions less than 1.14.2-1

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS6.1AI score0.02696EPSS
Exploits1References1
Prion
Prion
added 2022/04/12 6:15 p.m.29 views

Path traversal

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

3.5CVSS5.6AI score0.02696EPSS
Exploits1References6Affected Software4
AlpineLinux
AlpineLinux
added 2022/04/12 5:50 p.m.63 views

CVE-2021-28544

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS6AI score0.02696EPSS
Exploits1
Cvelist
Cvelist
added 2022/04/12 5:50 p.m.23 views

CVE-2021-28544 Apache Subversion SVN authz protected copyfrom paths regression

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

6.1AI score0.02696EPSS
Exploits1References6
CVE
CVE
added 2022/04/12 5:50 p.m.188 views

CVE-2021-28544

CVE-2021-28544 affects Apache Subversion (subversion) by leaking the copyfrom path in path-based authz protected copy operations. Affected components include httpd and svnserve services; root cause is disclosure of the original node’s copyfrom path, not its contents. Exploitation details are not ...

4.3CVSS5.7AI score0.02696EPSS
Exploits1References6Affected Software1
Debian CVE
Debian CVE
added 2022/04/12 5:50 p.m.27 views

CVE-2021-28544

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS6AI score0.02696EPSS
Exploits1
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.1 views

Apache Subversion 信息泄露漏洞

Apache Subversion is an open source version control system from the Apache Foundation. The system is compatible with the Concurrent Versioning System CVS, and an information disclosure vulnerability exists in Apache Subversion, which stems from a server exposing a "copyfrom" path that should be...

4.3CVSS6.5AI score0.02696EPSS
Exploits1References24
UbuntuCve
UbuntuCve
added 2021/04/12 12:0 a.m.34 views

CVE-2021-28544

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS6.4AI score0.02696EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2021/04/12 12:0 a.m.2 views

PT-2021-7353 · Apache +6 · Apache Subversion +6

Name of the Vulnerable Software and Affected Versions: Apache Subversion versions prior to the fixed version Description: The issue is related to improper authorization in the centralized version control system Apache Subversion. Exploitation of this issue allows a remote attacker to access...

8.2CVSS5.9AI score0.3777EPSS
Exploits3References78
OSV
OSV
added 2021/04/12 12:0 a.m.0 views

UBUNTU-CVE-2021-28544

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS6.8AI score0.02696EPSS
Exploits1References4
CNVD
CNVD
added 2018/08/27 12:0 a.m.1 views

WUZHI CMS SQL Injection Vulnerability (CNVD-2018-18141)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in the /coreframe/app/admin/copyfrom.php file in WUZHI CMS version 4.1.0. A remote attacker can exploit this vulnerability by...

9.8CVSS9.7AI score0.01537EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2018/08/17 12:0 a.m.41 views

Microsoft Edge Chakra DictionaryPropertyDescriptor::CopyFrom Failed Copy

Microsoft Edge: Chakra: DictionaryPropertyDescriptor::CopyFrom doesn't copy all fields CVE-2018-8291 Here's the method. template template void DictionaryPropertyDescriptor::CopyFromDictionaryPropertyDescriptor& descriptor this-Attributes = descriptor.Attributes; this-Data = descriptor.Data ==...

0.4AI score0.70028EPSS
Exploits3
Rows per page
Query Builder