USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors.
6.6AI Score
0.008EPSS
Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field.
5.9AI Score
0.002EPSS
6.1CVSS
5.9AI Score
0.001EPSS