← Back

CVE-2013-2088

nvd nist
Published: Jul 31, 2013Modified: Apr 29, 2026

JSON object

Loading...
7.1
Vector
AV:N/AC:H/Au:S/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.

Affected (24)

Apache
1 product
Subversion
Collabnet
1 product
Subversion
Opensuse
1 product
Opensuse
Configuration A
23 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Subversion
Up to 1.6.21
Subversion
Version 1.6.0
Subversion
Version 1.6.10
Subversion
Version 1.6.11
Subversion
Version 1.6.12
Subversion
Version 1.6.13
Subversion
Version 1.6.14
Subversion
Version 1.6.15
Subversion
Version 1.6.16
Subversion
Version 1.6.17
Subversion
Version 1.6.18
Subversion
Version 1.6.19
Subversion
Version 1.6.1
Subversion
Version 1.6.20
Subversion
Version 1.6.2
Subversion
Version 1.6.3
Subversion
Version 1.6.4
Subversion
Version 1.6.5
Subversion
Version 1.6.6
Subversion
Version 1.6.7
Subversion
Version 1.6.8
Subversion
Version 1.6.9
Subversion
Version 1.6.17
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Version 11.4

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.