The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade subversion | Aug 30, 2017 | Aug 12, 2015 |
| Centos_linux | — | Upgrade mod_dav_svnUpgrade subversion-javahlUpgrade subversion-perlUpgrade subversion-gnomeUpgrade subversion-rubyUpgrade subversion-toolsUpgrade subversion-develUpgrade subversion-pythonUpgrade subversion-libsUpgrade subversionUpgrade subversion-kde | Dec 1, 2016 | Aug 12, 2015 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Aug 12, 2015 |
| Freebsd | — | Upgrade subversion | Dec 10, 2025 | Aug 6, 2015 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion.Upgrade net-libs/serf. | Oct 30, 2017 | Aug 12, 2015 |
| Oracle_linux | — | Upgrade subversionUpgrade subversion-libsUpgrade subversion-perlUpgrade subversion-toolsUpgrade subversion-pythonUpgrade subversion-gnomeUpgrade subversion-rubyUpgrade mod_dav_svnUpgrade subversion-javahlUpgrade subversion-develUpgrade subversion-kde | Oct 16, 2024 | Aug 12, 2015 |
| Suse | — | Upgrade subversionUpgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion-develUpgrade subversion-pythonUpgrade subversion-toolsUpgrade subversion-perlUpgrade subversion-bash-completionUpgrade subversion-serverUpgrade libsvn_auth_kwallet-1-0 | Dec 18, 2015 | Aug 12, 2015 |
| Ubuntu | — | Upgrade libsvn1Upgrade subversionUpgrade libapache2-svn | Nov 8, 2024 | Aug 12, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub