WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
View the template here CVE-2021-32305.yaml
References:
http://packetstormsecurity.com/files/163225/Websvn-2.6.0-Remote-Code-Execution.html