QwikSec

Security Database

CVE

CWE

Training

CVE-2020-17525

Published: Mar 17, 2021

Modified: Feb 13, 2025

PUBLISHED

Description

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Vendor	Product	Versions
Apache Software Foundation	Apache Subversion	unaffected `mod_authz_svn 1.10.7` affected `mod_authz_svn - < 1.14.1`

Weaknesses (CWE)

References

https://subversion.apache.org/security/CVE-2020-17525-advisory.txt

x_refsource_MISC

[debian-lts-announce] 20210504 [SECURITY] [DLA 2646-1] subversion security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.