Every CVE Search/ Get API key

CVE-2007-2448

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users...

2.1 LowFix available

CVE-2007-2448 is a low vulnerability (CVSS 2.1) in Subversion, published June 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.52%, the 74th percentile. Fixed in subversion 1.4.4dfsg1-1.

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.

Exploit likelihood

1.52%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.

Record
CVE-2007-2448
CVSS 2.0
2.1 LowAV:N/AC:H/Au:S/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.

Record
CVE-2007-2448
Updated
2026-11-02
EUVDEUVD-2007-2443 No score

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.

Record
EUVD-2007-2443
Updated
2026-11-03
GitHub AdvisoriesGHSA-5qx7-4v6g-86g4 No score

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users...

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.

Record
GHSA-5qx7-4v6g-86g4
Updated
2026-11-02
OSV No score

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.

Record
CVE-2007-2448
Updated
2026-11-02
OSVDEBIAN-CVE-2007-2448 No score

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.

Record
DEBIAN-CVE-2007-2448
Updated
2026-11-02
OSVopenSUSE-SU-2024:11412-1 No score

libsvn_auth_gnome_keyring-1-0-1.14.1-1.11 on GA media

These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.14.1-1.11 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11412-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
subversion
Debian:12
 before 1.4.4dfsg1-1
1.4.4dfsg1-1
subversion
Debian:13
 before 1.4.4dfsg1-1
1.4.4dfsg1-1
subversion
Debian:14
 before 1.4.4dfsg1-1
1.4.4dfsg1-1
mod_dav_svn
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-javahl
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-perl
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-ruby
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
Show 8 moreShow less
Affected packages
PackageAffectedFixed
mod_dav_svn
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-devel
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-javahl
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-perl
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion-ruby
Red Hat:enterprise_linux:5::server
 before 0:1.6.11-7.el5
0:1.6.11-7.el5
subversion
openSUSE:Tumbleweed
 before 1.14.1-1.11
1.14.1-1.11

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02affected, aliases, facts, references, titleGitHub Advisories, OSV
2026-11-02createdCVE List, NVD

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open