REDHAT-BUG-1333673: XSS

Published May 6, 2016

Updated

A vulnerability was found in websvn. Having a directory or file in a repository with its filename containing a XSS payload will cause it to be executed in various parts of the application.

References:

http://seclists.org/oss-sec/2016/q2/257

Affected Software

1 affected component

WebSVN WebSVN

Event History

May 6, 2016

Data Sourced

via Red Hat·07:16 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1333673?

The severity of REDHAT-BUG-1333673 is classified as a Cross-Site Scripting (XSS) vulnerability.

How do I fix REDHAT-BUG-1333673?

To fix REDHAT-BUG-1333673, ensure that input sanitization is applied to filenames and outputs throughout the WebSVN application.

What are the potential impacts of REDHAT-BUG-1333673?

The potential impacts of REDHAT-BUG-1333673 include the execution of malicious scripts, which could lead to unauthorized actions within the application.

Which software is affected by REDHAT-BUG-1333673?

The software affected by REDHAT-BUG-1333673 is WebSVN.

Is there a workaround for REDHAT-BUG-1333673?

A possible workaround for REDHAT-BUG-1333673 includes avoiding the use of filenames that contain XSS payloads in your repositories.