WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.
References
Link | Resource |
---|---|
http://secunia.com/advisories/62233 | |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775682 | Issue Tracking Third Party Advisory |
http://www.debian.org/security/2015/dsa-3137 | Third Party Advisory |
Information
Published : 2015-01-21 10:59
Updated : 2016-08-26 12:25
NVD link : CVE-2013-6892
Mitre link : CVE-2013-6892
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
debian
- debian_linux
websvn
- websvn