TI-2020-13138 CVE-2020-17364 · GHSA-5qmr-p529-g6c8
USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.
Priority LOW 29
USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.
Usvn
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Usvn records in CISA KEVNo Usvn vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in User-friendly Svn · all components
TI-2007-05684 CVE-2007-5945 · GHSA-g8vh-p2qj-p47f
USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors.
Priority LOW 26
USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors.
TI-2014-03883 CVE-2014-4719 · GHSA-jh7x-q8r2-8mh3
Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly…
Priority LOW 23
Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field.