Skip to content
OpenAdvisories

Package · Ubuntu

viewvc

5 known vulnerabilities.

5 results · Feed

  • High 7.5

    ViewVC's standalone server exposes arbitrary server filesystem content

    ViewVC is a browser interface for CVS and Subversion version control repositories. In versions 1.1.0 through 1.1.31 and 1.2.0 through 1.2.3, the standalone.py script provided in the ViewVC distribution can expose the contents of the host server's filesystem t…

  • Medium 5.4

    ViewVC XSS vulnerability in revision view changed path "copyfrom" locations

    ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges t…

  • Medium 6.1

    ViewVC XSS vulnerability in revision view changed paths

    ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit …

  • Low 3.1

    XSS vulnerability in CVS show_subdir_lastmod support

    ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerability in CVS show_subdir_lastmod support. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a CVS repository exposed by an otherwise trusted ViewVC …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x be…