iF.SVNAdmin Cross-Site Request Forgery Vulnerability

iF.SVNAdmin is a web-based GUI for managing Subversion repositories with LDAP support and user/group permissions. A cross-site request forgery vulnerability exists in iF.SVNAdmin 1.6.2 and earlier versions, which can be exploited by an attacker to send unintended requests to the server via an...

CVE-2019-15128

iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user...

CVE-2019-15128

iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user...

CVE-2019-15128

CVE-2019-15128 affects iF.SVNAdmin through v1.6.2. The root cause is a CSRF in svnadmin/usercreate.php that allows an attacker to create a user. Impact stated: ability to create a user via cross-site request forgery; no further exploitation details provided in the sources. No remediation details ...