CVE-2024-37879: Improper Neutralization of Input During Web Page Generation

Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...

PT-2024-27805 · Usvn · Usvn

Name of the Vulnerable Software and Affected Versions: User-friendly SVN USVN versions prior to 1.0.12 Description: The issue is related to improper input validation in the /admin/config/save endpoint, allowing administrators to execute arbitrary code via the fields siteTitle, siteIco, and...

CVE-2024-37879

User-friendly SVN (USVN) versions prior to v1.0.12 are vulnerable to arbitrary code execution due to improper input validation in the /admin/config/save endpoint. An attacker can exploit the siteTitle, siteIco, and siteLogo fields to execute commands. The impact is significant as it allows for un...