CVE-2024-34995

1976-01-0100:00:00

mitre

github.com

AI Score

7.5

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserController#importOver. This vulnerability allows attackers to delete arbitrary files via a crafted POST request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:svnwebui:svnwebui:1.8.3:*:*:*:*:*:*:*"
    ],
    "vendor": "svnwebui",
    "product": "svnwebui",
    "versions": [
      {
        "status": "affected",
        "version": "1.8.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

github.com/cym1102/svnWebUI/issues/8