CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.1. It affects Apache. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-46901
Severity
LOW
CVSS
3.1
EPSS
1.94%
Apache
Original NVD Description
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue. Repositories served via other access methods are not affected.
Related CVEs
Other vulnerabilities affecting the same vendor(s)