VYPR
Critical severity9.9NVD Advisory· Published Dec 31, 2020· Updated Jun 17, 2026

CVE-2020-17363

CVE-2020-17363

Description

USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module. NOTE: this may overlap CVE-2020-25069.

Affected products

3
  • Usvn/Usvn2 versions
    cpe:2.3:a:usvn:usvn:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:usvn:usvn:*:*:*:*:*:*:*:*range: <1.0.9
    • (no CPE)range: <1.0.9
  • USVN/USVNdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.