← Database

CVE-2008-1290

MEDIUM CVSS: 4.3 Published: 2008-03-24 Modified: 2026-06-16

Description

ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, which allows remote attackers to obtain sensitive information.

Affected Platforms

Redhat FedoraViewvc ViewvcGentoo Linux

Weakness Type

CWE-200

References