CVE-2024-34995
Path Equivalence: 'fakedir/../realdir/filename' (CWE-57)
Summary
svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserController#importOver. This vulnerability allows attackers to delete arbitrary files via a crafted POST request.
Impact
An attacker could leverage this vulnerability to delete sensitive files on the vulnerable system, potentially leading to data loss, system instability, or further compromise of the affected host.
Exploitation
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch
Version 1.8.4 of svnWebUI is available and patches this arbitrary file deletion vulnerability. Upgrade to the latest patched release.
Mitigation
Apply the latest version 1.8.4 or later of svnWebUI which addresses this issue. Review file permissions and perform other hardening steps to restrict access to sensitive areas of the filesystem. Implement input validation to prevent uploading malicious files.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Timeline
NVD published the first details for CVE-2024-34995
Feedly found the first article mentioning CVE-2024-34995. See article
Feedly estimated the CVSS score as HIGH
This CVE started to trend in security discussions
This CVE stopped trending in security discussions