Skip to content
OpenAdvisories
Medium DLA-3266-1 2 CVEs

viewvc - security update

Published Jan 11, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 viewvc 1.1.26-1+deb10u1

Vulnerabilities 2

  • Medium 6.1
    CVE-2023-22456

    ViewVC XSS vulnerability in revision view changed paths

    ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit …

    viewvc viewvc viewvc Ubuntu
  • Medium 5.4
    CVE-2023-22464

    ViewVC XSS vulnerability in revision view changed path "copyfrom" locations

    ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges t…

    viewvc viewvc viewvc Ubuntu