CVE-2019-14422

CVE-2019-14422 is a critical vulnerability affecting TortoiseSVN 1.12.1. It allows for remote code execution through the Tsvncmd: URI handler, specifically when performing a customized diff operation on Excel workbooks. An attacker can craft a malicious URI that, when clicked, opens two Excel files containing macro viruses without triggering macro security warnings, leading to arbitrary code execution. This vulnerability has a high severity CVSS score of 8.8, indicating a network-based attack with low complexity, requiring user interaction, and resulting in high impacts to confidentiality, integrity, and availability. The FAUCET Risk Score is 94/100. While there is no evidence of active exploitation in the wild or Metasploit/Nuclei modules, an exploit (EDB-47252) is available on ExploitDB. There is minimal community discussion or media coverage surrounding this CVE.