CVE-2010-3315: Apache Subversion

Medium severity, CVSS 6.0. EPSS: 4.2% chance of exploitation in the next 30 days.

authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.

Affected products

• Apache Subversion: version 1.6.0 only; version 1.6.1 only; version 1.6.2 only; version 1.6.3 only; version 1.6.4 only; version 1.6.5 only; …

Published 2010-10-04. Last modified 2026-06-16.