PatchTheCVEwebsvn vulnerabilities and fixes
Recent CVEs affecting websvn, with upgrade or downgrade steps. 2 tracked.
websvn has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-10-26. Highest priority: CVE-2021-32305 (score 69/100).
- CVE-2021-32305 CRITICAL 9.8 UPGRADE WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the sear
- CVE-2011-2195 CRITICAL 9.8 DOWNGRADE A flaw was found in WebSVN 2.3.2
FAQ
How do I fix websvn vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is websvn being exploited right now?
None of the tracked websvn CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which websvn CVE should I patch first?
CVE-2021-32305 currently ranks highest (69/100): WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the sear.