FreeBSD : websvn -- reflected XSS (12d1b5a6-e39d-11e5-9f77-5453ed2e2b49)

Sebastien Delafond reports : Jakub Palaczynski discovered that websvn, a web viewer for Subversion repositories, does not correctly sanitize user-supplied input, which allows a remote user to run reflected cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

WebSVN 2.3.3 log.php文件path参数 跨站脚本漏洞

No description provided by source...

WebSVN <= 2.3.3 XSS Vulnerability

WebSVN is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tigris:websvn";...

Websvn Cross-Site Scripting Vulnerability

WebSVN is a set of web-based Subversion Repository browsers that allow you to view logs of files or folders, see a list of changes to files, add or remove arbitrary version numbers, and more. A cross-site scripting vulnerability exists in WebSVN, which allows remote attackers to exploit the...

Debian DSA-3490-1 : websvn - security update

Jakub Palaczynski discovered that websvn, a web viewer for Subversion repositories, does not correctly sanitize user-supplied input, which allows a remote user to run reflected cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

Debian DLA-428-1 : websvn security update

It was discovered that there was a cross-site scripting vulnerability in websvn, a web-based Subversion repository browser For Debian 6 Squeeze, this issue has been fixed in websvn version 2.3.1-1+deb6u2. NOTE: Tenable Network Security has extracted the preceding description block directly from t...

[SECURITY] [DSA 3490-1] websvn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3490-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 23, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3490-1] websvn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3490-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 23, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 428-1] websvn security update

Package : websvn Version : 2.3.1-1+deb6u2 CVE ID : CVE-2016-2511 It was discovered that there was a cross-site scripting vulnerability in websvn, a web-based Subversion repository browser For Debian 6 Squeeze, this issue has been fixed in websvn version 2.3.1-1+deb6u2. Regards, - -- ,. : : : Chri...

DSA-3490-1 websvn - security update

Bulletin has no description...

websvn -- reflected cross-site scripting

Sebastien Delafond reports: Jakub Palaczynski discovered that websvn, a web viewer for Subversion repositories, does not correctly sanitize user-supplied input, which allows a remote user to run reflected cross-site scripting attacks...

WebSVN 2.3.3 Cross Site Scripting

Title: WebSVN - Reflected Cross-Site Scripting Author: Jakub Palaczynski Date: 22. February 2016 CVE: CVE-2016-2511 Affected software: ================== WebSVN 2.3.3 Older versions are probably also vulnerable. Description: ============ WebSVN offers a view onto your subversion repositories that...

Debian DLA-136-1 : websvn security update

James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby access any file on disk readable by the user the webserver runs as. NOTE: Tenable Netwo...

Fedora Update for websvn FEDORA-2015-1465

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for websvn FEDORA-2015-1439

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : websvn-2.3.3-8.fc21 (2015-1465)

Security fix for CVE-2013-6892 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 20 : websvn-2.3.3-8.fc20 (2015-1439)

Security fix for CVE-2013-6892 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[SECURITY] Fedora 20 Update: websvn-2.3.3-8.fc20

WebSVN offers a view onto your subversion repositories that's been designed to reflect the Subversion methodology. You can view the log of any file or directory and see a list of all the files changed, added or deleted in any given revision. You can also view the differences between two versions ...

[SECURITY] Fedora 21 Update: websvn-2.3.3-8.fc21

WebSVN offers a view onto your subversion repositories that's been designed to reflect the Subversion methodology. You can view the log of any file or directory and see a list of all the files changed, added or deleted in any given revision. You can also view the differences between two versions ...

Debian DSA-3137-1 : websvn - security update

James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby access any file on disk readable by the user the webserver runs as. %NASLMINLEVEL 70300...