← All advisories

Critical severity9.8NVD Advisory· Published May 18, 2021· Updated Jun 17, 2026

CVE-2021-32305

CVE-2021-32305

Description

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Websvn/Websvn3 versions
cpe:2.3:a:websvn:websvn:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:websvn:websvn:*:*:*:*:*:*:*:*range: <2.6.1
- (no CPE)
- (no CPE)range: <2.6.1

Patches

Vulnerability mechanics

References

2

github.com/websvnphp/websvn/pull/142nvdIssue TrackingPatchThird Party Advisory
packetstormsecurity.com/files/163225/Websvn-2.6.0-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

1

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
The Hacker News · Jul 23, 2026