CVE-2009-0240

NONE EPSS 72.8%

Published Jan 21, 200917y ago · Modified Jun 16, 20262w ago

Published Jan 21, 2009 17y ago

Last Modified Jun 16, 2026 2w ago

Description

listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter.

Threat Intelligence

EPSS Exploit Probability

72.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-264

Affected Products 1

Vendor	Product	Version	Range
tigris	websvn	2.0	any

References 8

bugs.debian.org http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512191
secunia.com http://secunia.com/advisories/32338

Vendor Advisory
secunia.com http://secunia.com/advisories/33945
secunia.com http://secunia.com/advisories/34191
debian.org http://www.debian.org/security/2009/dsa-1725
gentoo.org http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml
openwall.com http://www.openwall.com/lists/oss-security/2009/01/18/2
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/48171

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.