Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-34995 EUVD-2024-35144

svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.User…

Published May 24, 2024 · Updated Feb 13, 2025 · Assigned by mitre

Description

svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserController#importOver. This vulnerability allows attackers to delete arbitrary files via a crafted POST request.

References