PT-2023-18516 · Viewvc · Viewvc

Cmpilatopublished · Published 2023-01-04 · Updated 2023-01-24 · CVE-2023-22464

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ViewVC versions prior to 1.2.3 ViewVC versions prior to 1.1.30

Description ViewVC is a browser interface for CVS and Subversion version control repositories. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by an otherwise trusted ViewVC instance. The attack vector involves files with unsafe names, which themselves can be challenging to create.

Recommendations For versions prior to 1.2.3, update to at least version 1.2.3. For versions prior to 1.1.30, update to at least version 1.1.30. For ViewVC 1.0.x, edit the ViewVC EZT view templates to manually HTML-escape changed path "copyfrom paths" during rendering by wrapping references to [changes.copy path] with [format "html"] and [end]. This workaround should be reverted after upgrading to a patched version of ViewVC.

Exploit

Fix

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2023-22464

DLA-3266-1

GHSA-JVPJ-293Q-Q53H

MGASA-2023-0019

Affected Products

Viewvc

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22464.json · Exploit
• 🔥 https://github.com/viewvc/viewvc/issues/311 · Exploit
• https://ubuntu.com/security/CVE-2023-22464 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-22464 · Security Note
• https://advisories.mageia.org/MGASA-2023-0019.html · Security Note
• https://debian.org/lts/security/2023/dla-3266 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-22464 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-22464 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3266-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-22464 · Security Note
• https://osv.dev/vulnerability/MGASA-2023-0019 · Vendor Advisory
• https://github.com/viewvc/viewvc/security/advisories/GHSA-jvpj-293q-q53h · Note
• https://github.com/viewvc/viewvc/releases/tag/1.2.3 · Note
• https://github.com/viewvc/viewvc/issues/311#issuecomment-1371011216 · Note
• https://github.com/viewvc/viewvc/commit/8c61b87b3e8745ab298e1463e1fce092e5c01026 · Note