CVE-2019-15128
MEDIUMiF.SVNAdmin < 1.6.2 - Cross-Site Request Forgery via User Creation Endpoint
Title source: llmDescription
iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://zeroauth.ltd/blog/2019/08/23/cve-2019-15128-if-svnadmin-through-1-6-2-allows-svnadmin-usercreate-php-csrf-to-create-a-user/
Scores
CVSS v3
6.5
EPSS
0.0066
EPSS Percentile
47.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Details
CWE
CWE-352
Status
published
Products (1)
if.svnadmin_project/if.svnadmin
< 1.6.2
Published
Sep 06, 2019
Tracked Since
Feb 18, 2026