svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserController#importOver. This vulnerability allows attackers to delete arbitrary files via a crafted POST request.
References
Link | Resource |
---|---|
https://github.com/cym1102/svnWebUI/issues/8 |
Configurations
No configuration.
History
03 Jul 2024, 02:01
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-57 | |
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
24 May 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-24 16:15
Updated : 2024-07-03 02:01
NVD link : CVE-2024-34995
Mitre link : CVE-2024-34995
CVE.ORG link : CVE-2024-34995
JSON object : View
Products Affected
No product.
CWE
CWE-57
Path Equivalence: 'fakedir/../realdir/filename'