The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0251