High severity · published Oct 9, 2024
CVE-2024-45720
Apache Subversion: Command line argument injection on Windows platforms
7.8
CVSS
0.6%
EPSS
No
On KEV
Description
On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to unexpected command line argument interpretation, including argument injection and execution of other programs, if a specially crafted command line argument string is processed.
All versions of Subversion up to and including Subversion 1.14.3 are affected on Windows platforms only. Users are recommended to upgrade to version Subversion 1.14.4, which fixes this issue.
Subversion is not affected on UNIX-like platforms.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Apache Subversion · Apache Software Foundation
1.0.0 through 1.14.3 · source: vendor
SU
Subversion · Apache
before 1.14.4 · source: NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-45720
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-45720
Vendor Advisory
https://subversion.apache.org/security/CVE-2024-45720-advisory.txt
Mailing List
http://www.openwall.com/lists/oss-security/2024/10/08/3
More from Apache Subversion
7.5
CVE-2018-11803
Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a…
4.3
CVE-2024-46901
Apache Subversion: mod_dav_svn denial-of-service via control characters in paths