CVE-2007-2448

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-14 · updated 2026-06-16

Description

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.

Affected products

Subversion: through 1.4.3

References

http://osvdb.org/36070
http://secunia.com/advisories/43139
http://securitytracker.com/id?1018237
http://subversion.tigris.org/security/CVE-2007-2448-advisory.txt
http://www.securityfocus.com/bid/24463
http://www.ubuntu.com/usn/USN-1053-1
http://www.vupen.com/english/advisories/2007/2230
http://www.vupen.com/english/advisories/2011/0264
https://issues.rpath.com/browse/RPL-1896
http://osvdb.org/36070
http://secunia.com/advisories/43139
http://securitytracker.com/id?1018237

Get alerted when CVE-2007-2448 or the next vulnerability affects your stack