CVE-2010-0005: Viewvc

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query.

Affected products

• Viewvc Viewvc: up to and including 1.1.2; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …

Published 2010-01-29. Last modified 2026-06-16.