Remote Authentication Spoofing Vulnerability in Subversion's mod_dav_svn Server

CVE-2015-0251 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:P/A:N

The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.

Learn more about our Cis Benchmark Audit For Server Software.