Skip to content
fr Sign in
8.2 High

CVE-2024-45720 On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables…

Description

On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to unexpected command line argument interpretation, including argument injection and execution of other programs, if a specially crafted command line argument string is processed. All versions of Subversion up to and including Subversion 1.14.3 are affected on Windows platforms only. Users are recommended to upgrade to version Subversion 1.14.4, which fixes this issue. Subversion is not affected on UNIX-like platforms.

Affected products and versions

Product Affected versions Fixed in
Apache Subversion 1.0 1.0.0 → 1.14.3 No fix stated
subversion 1.0 1.0.0 → 1.14.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache Subversion

The 8 CVEs of Apache Subversion →
CVE-2024-46901 Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn… 3.1 Low CVE-2022-24070 Subversion's mod_dav_svn is vulnerable to memory corruption Not rated CVE-2021-28544 Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should… Not rated CVE-2020-17525 Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the… Not rated
Track this CVE