CVE-2008-1290
Publication date 24 March 2008
Last updated 24 July 2024
Ubuntu priority
ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, which allows remote attackers to obtain sensitive information.