3.1
Low
CVE-2024-46901 Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn…
Description
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue. Repositories served via other access methods are not affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Subversion 1.14 | earliest → 1.14.4 | No fix stated |
References
- subversion.apache.org subversion.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Subversion
The 8 CVEs of Apache Subversion →
CVE-2024-45720
On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables…
8.2
High
CVE-2022-24070
Subversion's mod_dav_svn is vulnerable to memory corruption
Not rated
CVE-2021-28544
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should…
Not rated
CVE-2020-17525
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the…
Not rated