Approved changes feed: RSS · Atom

cpe:2.3:a:apache:subversion:1.8.13:*:*:*:*:*:*:*

part: a version: 1.8.13 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSubversion (0384f294-d291-598e-baf4-379632e9d3cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/subversion purl2cpe 2026-06-01 10:14:31.497004
pkg:deb/debian/subversion purl2cpe 2026-06-01 10:14:31.497005
pkg:deb/ubuntu/subversion purl2cpe 2026-06-01 10:14:31.497006
pkg:github/apache/subversion purl2cpe 2026-06-01 10:14:31.497008
pkg:maven/org.apache.subversion/subversion purl2cpe 2026-06-01 10:14:31.497009
pkg:rpm/centos/subversion purl2cpe 2026-06-01 10:14:31.497010
pkg:rpm/fedora/subversion purl2cpe 2026-06-01 10:14:31.497012
pkg:rpm/opensuse/subversion purl2cpe 2026-06-01 10:14:31.497013

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8734 vulnerable 2026-06-08 05:08:14.714733 Details available
Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
Published: 2017-10-16T13:00:00.000Z
Updated: 2024-09-16T20:01:52.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3187 vulnerable 2026-06-08 05:06:37.463877 Details available
The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path.
Published: 2015-08-12T14:00:00.000Z
Updated: 2024-08-06T05:39:31.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3184 vulnerable 2026-06-08 05:06:37.447010 Details available
mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.
Published: 2015-08-12T14:00:00.000Z
Updated: 2024-08-06T05:39:31.648Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.