CVE-2024-46901: Apache Subversion: mod_dav_svn denial-of-service via control characters in paths
Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.
All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via moddavsvn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.
Repositories served via other access methods are not affected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46901?
The severity of CVE-2024-46901 is considered medium due to its potential impact on the integrity of Subversion repositories.
How do I fix CVE-2024-46901?
To fix CVE-2024-46901, upgrade Apache Subversion to a version newer than 1.14.4 that addresses the vulnerability.
What versions of Apache Subversion are affected by CVE-2024-46901?
All versions of Apache Subversion up to and including 1.14.4 are affected by CVE-2024-46901.
What is the impact of CVE-2024-46901 on Subversion repositories?
The impact of CVE-2024-46901 allows authenticated users with commit access to introduce corrupted revisions, potentially disrupting repository usage.
Can unauthorized users exploit CVE-2024-46901?
No, CVE-2024-46901 requires authenticated users with commit access to exploit the vulnerability.