CVE-2013-4558 in Subversion信息

摘要

由 MITRE

The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote attackers to cause a denial of service (assertion failure and Apache process abort) via a non-canonical URL in a request, as demonstrated using a trailing /.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2013-06-12

披露

2013-12-07

管理

已接受

条目

VDB-11324

CPE

准备好

CWE

CWE-20 (已确认)

CVSS

3.5 (NVD)

EPSS

0.05882

KEV

否

活动

非常低

部门

Hostingprovider

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2013-4558
NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-4558
CVE Details	https://www.cvedetails.com/cve/CVE-2013-4558/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!