CVE-2011-2195 Command injection in websvn
An attacker can execute arbitrary OS commands via the dl.php script if the allowDownload option is enabled, requiring no authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-2195?
CVE-2011-2195 is a critical command injection vulnerability in websvn, published on 26 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php script and pass a well formed 'path' argument to execute arbitrary commands against the underlying operating system.
Weakness: CWE-78
Which versions are affected by CVE-2011-2195?
It affects 1 product.
Products include Websvn Websvn.
How do I fix CVE-2011-2195?
No fix has been published for CVE-2011-2195 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2011-2195 being exploited?
There is no known exploitation of CVE-2011-2195 in the wild and no public exploit code.
Other vulnerabilities in websvn
Sources
Also known as GHSA-q3rm-gwvh-vhv3.