CVE-2009-0240

EPSS 0.41%
Published 21.01.2009 02:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Tigris ≫ Websvn Version2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.41%	0.606

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:P/I:N/A:N

http://secunia.com/advisories/32338

Vendor Advisory

http://secunia.com/advisories/34191

http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512191

http://secunia.com/advisories/33945

http://www.debian.org/security/2009/dsa-1725

http://www.openwall.com/lists/oss-security/2009/01/18/2

https://exchange.xforce.ibmcloud.com/vulnerabilities/48171

https://nvd.nist.gov/vuln/detail/CVE-2009-0240

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0240

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0240

EUVD