Tracker / CVE-2013-2088
CVE-2013-2088
High 7.1
contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.
Affected products and versions
| apache | subversion |
|---|---|
| apache | subversion · … → 1.6.21 |
| collabnet | subversion |
| opensuse | opensuse |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.