CVE-2013-6892: WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.

Security readout for executives and security teams

WebSVN 2.3.3 had a flaw where an authenticated user could abuse a committed symlink to make the application disclose files it should not expose. The provided sources do not include CVSS, CWE, affected package ranges beyond WebSVN 2.3.3, or evidence of active exploitation. Exposure is most likely where WebSVN 2.3.3 is deployed and authenticated users can commit or influence repository content containing symlinks. Internet exposure increases impact, but authentication is required according to the CVE description. Treat this as a targeted internal or partner-access risk rather than an unauthenticated internet worm risk. Prioritize remediation for exposed WebSVN instances, especially where many users can commit code or where sensitive local files may be accessible. Mitigation focus: Check Debian DSA-3137 and vendor guidance for applicable WebSVN updates.; Upgrade or replace WebSVN 2.3.3 where it is still deployed.; Restrict WebSVN access to trusted networks and authenticated users only..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.