viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.

Published Nov 7, 2019 · Updated Aug 7, 2024 · Assigned by mitre