CVE-2016-1236

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-05-11 · updated 2026-06-17
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a (a) file or (b) directory in a repository.

Affected products

Debian Linux: 8.0
websvn: all versions

References

http://www.debian.org/security/2016/dsa-3572
http://www.openwall.com/lists/oss-security/2016/05/05/22
https://bugzilla.redhat.com/show_bug.cgi?id=1333673
http://www.debian.org/security/2016/dsa-3572
http://www.openwall.com/lists/oss-security/2016/05/05/22
https://bugzilla.redhat.com/show_bug.cgi?id=1333673

Get alerted when CVE-2016-1236 or the next vulnerability affects your stack