CVEvulnerability

CVE-2013-2088

7.1 HIGH Published 2013-07-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-07-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:H/Au:S/C:C/I:C/A:C
Weaknesses
CWE-20

Description

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.

Affected configurations

• apache subversion (<= 1.6.21) • apache subversion 1.6.0 • apache subversion 1.6.1 • apache subversion 1.6.2 • apache subversion 1.6.3 • apache subversion 1.6.4 • apache subversion 1.6.5 • apache subversion 1.6.6 • apache subversion 1.6.7 • apache subversion 1.6.8 • apache subversion 1.6.9 • apache subversion 1.6.10 • apache subversion 1.6.11 • apache subversion 1.6.12 • apache subversion 1.6.13 • apache subversion 1.6.14 • apache subversion 1.6.15 • apache subversion 1.6.16 • apache subversion 1.6.17 • apache subversion 1.6.18 • apache subversion 1.6.19 • apache subversion 1.6.20 • collabnet subversion 1.6.17 • opensuse opensuse 11.4

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References