What’s Vulnerable › Vulnerabilities

CVE-2019-15128

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-09-06 · updated 2026-06-17
• Weakness: CWE-352

Description

iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.

Affected products

• If.Svnadmin Project If.Svnadmin: through 1.6.2

References

• https://zeroauth.ltd/blog/2019/08/23/cve-2019-15128-if-svnadmin-through-1-6-2-allows-svnadmin-usercreate-php-csrf-to-create-a-user/
• https://zeroauth.ltd/blog/2019/08/23/cve-2019-15128-if-svnadmin-through-1-6-2-allows-svnadmin-usercreate-php-csrf-to-create-a-user/

Get alerted when CVE-2019-15128 or the next vulnerability affects your stack