8.2
Élevée
CVE-2024-45720 On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables…
Description
On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to unexpected command line argument interpretation, including argument injection and execution of other programs, if a specially crafted command line argument string is processed. All versions of Subversion up to and including Subversion 1.14.3 are affected on Windows platforms only. Users are recommended to upgrade to version Subversion 1.14.4, which fixes this issue. Subversion is not affected on UNIX-like platforms.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Subversion 1.0 | 1.0.0 → 1.14.3 | Pas de correctif indiqué |
| subversion 1.0 | 1.0.0 → 1.14.3 | Pas de correctif indiqué |
Références
- subversion.apache.org subversion.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Subversion
Les 8 CVE de Apache Subversion →
CVE-2024-46901
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn…
3.1
Faible
CVE-2022-24070
Subversion's mod_dav_svn is vulnerable to memory corruption
Non notée
CVE-2021-28544
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should…
Non notée
CVE-2020-17525
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the…
Non notée