VULNERABILITY INTELLIGENCE

CVE-2015-0251

CVSS score4 MEDIUM
EPSS probability7.89%
CISA KEVNot currently listed
Published2015-04-08
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N

Description

The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.

Weakness classification

  • CWE-345: Insufficient Verification of Data Authenticity

Primary references