Apache Subversion mod_dav_svn server new revision svn:author attribute value spoofing vulnerability

Subversion is an open source multi-user version control system that supports non-ASCII text and binary data. The Subversion moddavsvn server allows arbitrary setting of the svn:author attribute value when submitting new revisions. This allows an attacker to use a carefully constructed sequence of...

PT-2014-2430

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue allows remote authenticated users to gain privileges. This can be achieved via a XMLHttpRequest or an AJAX request, such as '/api/v1/requests'. The username and password variables may be...