CVE-2021-32305: OS Command Injection
First published: Tue May 18 2021(Updated: )
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Websvn Websvn | <2.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-32305.
What is the severity of CVE-2021-32305?
The severity of CVE-2021-32305 is critical with a CVSS score of 9.8.
What is the description of CVE-2021-32305?
CVE-2021-32305 is a vulnerability in WebSVN before 2.6.1 that allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
What software is affected by CVE-2021-32305?
WebSVN versions up to and excluding 2.6.1 are affected by CVE-2021-32305.
Is there a fix available for CVE-2021-32305?
Yes, updating WebSVN to version 2.6.1 or later will fix the vulnerability.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/websvn
- canonical/websvn websvn