Subversion vulnerabilities

2 known vulnerabilities in Subversion from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Apache Subversion: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-45720Oct 9, 2024Apache

  On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to unexpected command line argument interpretation, including argument injection and execution of other progra

• 7.5 High severity

  Apache Subversion: Use After Free

  CVE-2022-24070Apr 12, 2022ApacheEPSS 8.87%

  Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive).