Vulnerabilities > Usvn > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2020-12-31 | CVE-2020-17363 | OS Command Injection vulnerability in Usvn USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module. | 9.9 |
2020-09-01 | CVE-2020-25069 | Unspecified vulnerability in Usvn USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view. | 9.8 |