Evil-DB LogoEvil-DB
← All CVEs

CVE-2013-2088

high · 7.1

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.

7.1
CVSS
31.5%
EPSS (exploit prob.)
98th
EPSS percentile
2013-07-31
Published

AV:N/AC:H/Au:S/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
apachesubversion<= 1.6.21
apachesubversion1.6.0
apachesubversion1.6.1
apachesubversion1.6.2
apachesubversion1.6.3
apachesubversion1.6.4
apachesubversion1.6.5
apachesubversion1.6.6
apachesubversion1.6.7
apachesubversion1.6.8
apachesubversion1.6.9
apachesubversion1.6.10
apachesubversion1.6.11
apachesubversion1.6.12
apachesubversion1.6.13
apachesubversion1.6.14
apachesubversion1.6.15
apachesubversion1.6.16
apachesubversion1.6.17
apachesubversion1.6.18
apachesubversion1.6.19
apachesubversion1.6.20
collabnetsubversion1.6.17
opensuseopensuse11.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-2088