The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subversion-svn2clUpgrade subversion-rubyUpgrade mod_dav_svnUpgrade subversion-pythonUpgrade subversion-perlUpgrade subversion-develUpgrade subversion-gnomeUpgrade subversion-toolsUpgrade subversion-javahlUpgrade subversion-libsUpgrade subversionUpgrade subversion-kde | Dec 1, 2016 | Apr 8, 2015 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Apr 8, 2015 |
| Freebsd | — | Upgrade mod_dav_svnUpgrade subversion17Upgrade subversionUpgrade subversion16 | Dec 10, 2025 | Mar 31, 2015 |
| Gentoo Linux | — | Upgrade net-libs/serf.Upgrade dev-vcs/subversion. | Oct 30, 2017 | Apr 8, 2015 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | Apr 8, 2015 |
| Oracle_linux | — | Upgrade subversion-svn2clUpgrade subversion-libsUpgrade subversion-kdeUpgrade subversionUpgrade subversion-javahlUpgrade mod_dav_svnUpgrade subversion-gnomeUpgrade subversion-develUpgrade subversion-rubyUpgrade subversion-pythonUpgrade subversion-perlUpgrade subversion-tools | Oct 16, 2024 | Apr 8, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 31, 2015 |
| Suse | — | Upgrade subversion-toolsUpgrade subversionUpgrade subversion-perlUpgrade subversion-serverUpgrade libsvn_auth_kwallet-1-0Upgrade subversion-develUpgrade subversion-pythonUpgrade subversion-bash-completionUpgrade libsvn_auth_gnome_keyring-1-0 | Dec 18, 2015 | Apr 8, 2015 |
| Ubuntu | — | Upgrade subversionUpgrade libapache2-svnUpgrade libsvn1 | Nov 8, 2024 | Apr 8, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub