CVE-2004-1438

CVE-2004-1438 describes a vulnerability in the mod_authz_svn Apache module for Subversion versions 1.0.4-r1 and earlier. This flaw allows authenticated users with write access to a repository to bypass authorization controls and read unauthorized portions of the repository by using the svn copy command. The vulnerability has a low CVSS score of 2.1, indicating low severity. It requires local access (AV:L) and low attack complexity (AC:L), with no authentication needed (Au:N) for the specific action, leading to a partial confidentiality impact (C:P) without affecting integrity or availability. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Despite its age and low severity, the CVE has garnered a notable amount of community discussion, primarily on GitHub.