SU
Product
Subversion
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 6Low 0
Watch
Add Subversion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2167 | 6.8 | May 5 | The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote… Affected: through 1.8.15; 1.9.0; 1.9.1; 1.9.2; 1.9.3 |
| CVE-2018-11782 | 6.5 | Sep 26 | In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular… Affected: through 1.9.10; 1.10.0 through 1.10.4; 1.11.0 through 1.11.1; 1.12.0 |
| CVE-2016-8734 | 6.5 | Oct 16 | Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML… Affected: 1.4.0; 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.4.5; +34 more |
| CVE-2016-2168 | 6.5 | May 5 | The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause… Affected: through 1.8.15; 1.9.0; 1.9.1; 1.9.2; 1.9.3 |
| CVE-2024-46901 | 4.3 | Dec 9 | Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a… Affected: before 1.14.5 |
| CVE-2021-28544 | 4.3 | Apr 12 | Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization… Affected: 1.10.0 through 1.14.1 |
Showing 6