← Retour aux CVEs

CVE-2025-54141

HIGH

7.5

Description

ViewVC is a browser interface for CVS and Subversion version control repositories. In versions 1.1.0 through 1.1.31 and 1.2.0 through 1.2.3, the standalone.py script provided in the ViewVC distribution can expose the contents of the host server's filesystem though a directory traversal-style attack. This is fixed in versions 1.1.31 and 1.2.4.

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie7/22/2025

Derniere modification8/5/2025

Sourcenvd

Observations honeypot0

Produits affectes

viewvc:viewvc

Faiblesses (CWE)

CWE-22CWE-79

References

https://github.com/viewvc/viewvc/commit/1dd84542c39b39e4a3f434db84a8ba3441d6a1e7(security-advisories@github.com)

https://github.com/viewvc/viewvc/commit/5d7c76be07b77dce4ff631e9b866056344f11e84(security-advisories@github.com)

https://github.com/viewvc/viewvc/issues/211(security-advisories@github.com)

https://github.com/viewvc/viewvc/security/advisories/GHSA-rv3m-76rj-q397(security-advisories@github.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.