USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view.
CVSS Score
9.8
EPSS Score
0.011
Published
2020-09-01
USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature.
CVSS Score
8.8
EPSS Score
0.002
Published
2020-09-01