CVE:CVE-2021-28544
CNNVD:CNNVD-202204-2951
Apache Subversion是美国阿帕奇（Apache）基金会的一套开源的版本控制系统。该系统可兼容并发版本系统(CVS)。
Apache Subversion 1.14.1 之前版本存在信息泄露漏洞，该漏洞源于服务器暴露了应该根据配置的基于路径的授权 (authz) 规则隐藏的“copyfrom”路径。攻击者利用该漏洞可以看到原始节点的“copyfrom”路径。
solution:Upgrade apache subversion to a higher version than 1.14.1,and avoid the version [1.10.0,1.14.1]; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36; Upgrade apple macos to a higher version than 12.5,and avoid the version [12.0,12.5)