CollabNet Subversion Edge index local file inclusion

Posted by Oliver-Tobias Ripka on Jun 29

# Vuln Title: Local file inclusion in CollabNet Subversion Edge Management
# Frontend via logfile “listViewItem” parameter of the “index” action
#
# Date: 28.06.2015
# Author: otr
# Software Link: https://www.open.collab.net/downloads/svnedge
# Vendor: CollabNet
# Version: 4.0.11
# Tested on: Fedora Linux
# Type: Local file inclusion
#
# Risk: Medium
# Status: public/fixed
# Fixed version: 5.0

Timeline:

2014-10-09 Flaw…

Leave a Reply