CVE-2009-0240: Tigris Websvn

Low severity, CVSS 3.5. EPSS: 1.6% chance of exploitation in the next 30 days.

listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter.

Affected products

• Tigris Websvn: version 2.0 only

Published 2009-01-21. Last modified 2026-06-16.