VULNERABILITY INTELLIGENCE

CVE-2013-2088

CVSS score7.1 HIGH
EPSS probability31.47%
CISA KEVNot currently listed
Published2013-07-31
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:S/C:C/I:C/A:C

Description

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references