Gnu Cvs vulnerabilities
2 vulnerabilities
Known vulnerabilities in Gnu Cvs, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-12836alpinecvs+18
EPSS score6.64%
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."CVE-2004-0778debiancvs+1EPSS score2.40%
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.