PT-2024-31739

CVE-2024-45720

·

تاريخ النشر

2024-10-08

·

تاريخ التحديث

2026-02-21

الوصف من

CVSS 3.1
8.2
عالية
المقاييسAV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Apache Subversion versions up to and including 1.14.3
Description: On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables may lead to unexpected command line argument interpretation, including argument injection and execution of other programs, if a specially crafted command line argument string is processed. This issue affects Windows platforms only and does not impact UNIX-like platforms.
Recommendations: For Apache Subversion versions up to and including 1.14.3, upgrade to version 1.14.4, which fixes this issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2024-17031
ALT-PU-2024-17033
ALT-PU-2024-17143
ALT-PU-2024-17145
BIT-SUBVERSION-2024-45720
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾