The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subversion-develUpgrade subversion-perlUpgrade subversion-svn2clUpgrade subversion-toolsUpgrade subversion-pythonUpgrade subversion-rubyUpgrade subversion-javahlUpgrade mod_dav_svnUpgrade subversion-gnomeUpgrade subversionUpgrade subversion-kdeUpgrade subversion-libs | Dec 1, 2016 | Apr 8, 2015 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Apr 8, 2015 |
| Freebsd | — | Upgrade subversion16Upgrade subversionUpgrade mod_dav_svnUpgrade subversion17 | Dec 10, 2025 | Mar 31, 2015 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion.Upgrade net-libs/serf. | Oct 30, 2017 | Apr 8, 2015 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | Apr 8, 2015 |
| Oracle_linux | — | Upgrade subversion-pythonUpgrade subversion-rubyUpgrade subversion-develUpgrade subversion-toolsUpgrade subversion-javahlUpgrade subversion-perlUpgrade subversion-gnomeUpgrade mod_dav_svnUpgrade subversion-svn2clUpgrade subversion-libsUpgrade subversion-kdeUpgrade subversion | Oct 16, 2024 | Apr 8, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 31, 2015 |
| Suse | — | Upgrade subversionUpgrade subversion-toolsUpgrade subversion-perlUpgrade subversion-bash-completionUpgrade subversion-pythonUpgrade libsvn_auth_gnome_keyring-1-0Upgrade libsvn_auth_kwallet-1-0Upgrade subversion-serverUpgrade subversion-devel | Dec 18, 2015 | Apr 8, 2015 |
| Ubuntu | — | Upgrade subversionUpgrade libsvn1Upgrade libapache2-svn | Nov 8, 2024 | Apr 8, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub