Lucene search

K
saintSAINT CorporationSAINT:ACCF7BFB51925E0D4EB4A45E0C9E9167
HistoryJun 23, 2021 - 12:00 a.m.

WebSVN search command execution

2021-06-2300:00:00
SAINT Corporation
download.saintcorporation.com
130

0.946 High

EPSS

Percentile

99.3%

Added: 06/23/2021

Background

WebSVN is a web interface for Subversion repositories.

Problem

A command injection vulnerability allows remote unauthenticated attackers to execute arbitrary commands by sending a specially crafted search request.

Resolution

Upgrade to WebSVN 2.6.1 or higher.

References

<https://www.cvedetails.com/cve/CVE-2021-32305/&gt;

Platforms

Linux