Apache Software Foundation Apache Subversion
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-46901 | ≤ 1.14.4 | Apache Subversion: mod_dav_svn denial-of-service via control characters in paths | MEDIUM 4.3 | 1.9 % | ||
| CVE-2024-45720 | 1.0.0 – 1.14.3 | Apache Subversion: Command line argument injection on Windows platforms | HIGH 8.2 | 0.6 % | ||
| CVE-2022-24070 | 1.10.0 to 1.14.1 | Apache Subversion mod_dav_svn is vulnerable to memory corruption | HIGH 7.5 | 9.5 % | ||
| CVE-2021-28544 | 1.10.0 to 1.14.1 | Apache Subversion SVN authz protected copyfrom paths regression | MEDIUM 4.3 | 2.8 % | ||
| CVE-2020-17525 | mod_authz_svn – < 1.14.1 | Remote unauthenticated denial-of-service in Subversion mod_authz_svn | HIGH 7.5 | 40 % | ||
| CVE-2018-11803 | Apache Subversion 1.11.0, 1.10.0 to 1.10.3 | Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if | HIGH 7.5 | 58 % | ||
| CVE-2016-8734 | 1.4.0 to 1.8.16 ; 1.9.0 to 1.9.4 | Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-servi | MEDIUM 6.5 | 6.4 % | ||
| CVE-2017-9800 | 1.0.0 to 1.8.18 ; 1.9.0 to 1.9.6 | A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha | CRITICAL 9.8 | 19 % |