CVE-2023-36811

CVE-2023-36811 affects borgbackup. A flaw in the cryptographic authentication scheme allowed an attacker to spoof archives and potentially cause backup data loss in a repository, requiring the ability to insert files into backups and to gain write access to the repository. The issue does not disc...

CVE-2017-15914

The CVE describes an improper access-control flaw in BorgBackup 1.1.x prior to 1.1.3 that lets remote users override repository restrictions. Affected component is Borg servers (backup repository access control); root cause is incorrect access-control implementation. Impact is high on confidentia...