CVE-2021-28544 Apache Subversion SVN authz protected copyfrom paths regression
Attackers with access to copied files can view the original protected source path, bypassing authorization rules that should hide it.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-28544?
CVE-2021-28544 is a medium-severity vulnerability in Apple Macos, published on 12 Apr 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom' path of the original. This also reveals the fact that the node was copied. Only the 'copyfrom' path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.
Weakness: CWE-200
Which versions are affected by CVE-2021-28544?
1 open source package ship an affected version, including subversion. It affects 4 products.
| Package | Affected | Fixed in |
|---|---|---|
subversion Bitnami | From 1.10.0 | 1.14.2 |
Products include Apache Subversion, Apple Macos, Debian Debian Linux, Fedoraproject Fedora.
How do I fix CVE-2021-28544?
Upgrade subversion to 1.14.2 or later.
Is CVE-2021-28544 being exploited?
There is no known exploitation of CVE-2021-28544 in the wild and no public exploit code.
Other vulnerabilities in Apple Macos
- CVE-2017-9800 A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha
- CVE-2013-4246 Denial of service in n/a
- CVE-2015-5259 Integer overflow in n/a
- CVE-2024-45720 Apache Subversion: Command line argument injection on Windows platforms
- CVE-2015-0202 Denial of service in n/a
Sources
Also known as ALPINE-CVE-2021-28544, AZL-9367, BIT-subversion-2021-28544, CLSA-2026-1778894989, DEBIAN-CVE-2021-28544, GHSA-q36f-8454-r4h2 and 1 more.