CVE-2011-2195

A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php script and pass a well formed 'path' argument to execute arbitrary commands against the underlying operating system.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

2.66% chance of exploitation in the next 30 days, 85th percentile

Published

2021-10-26

Updated

2024-08-06

Proof-of-concept exploits (1)

• https://seclists.org/bugtraq/2011/Jun/34

References

• CVE Record
• NVD entry

Related

• CVE-2011-2194
• CVE-2011-2201
• CVE-2011-2189
• CVE-2011-2202
• CVE-2011-2183
• CVE-2011-2207