Subversion (Jenkins) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 116 known versions, newest CVE from 2022-04-12. Vendor: Jenkins.

CVEs of Subversion

• CVE-2022-29048 - CVSS 4.3 (medium), 2022-04-12: A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.
• CVE-2022-29046 - CVSS 5.4 (medium), 2022-04-12: Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying…
• CVE-2021-21698 - CVSS 7.5 (high), 2021-11-04: Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent.
• CVE-2020-2304 - CVSS 6.5 (medium), 2020-11-04: Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
• CVE-2020-2111 - CVSS 5.4 (medium), 2020-02-12: Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, resulting in a…
• CVE-2018-1000111 - CVSS 5.3 (medium), 2018-03-13: An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and…
• CVE-2017-1000085 - CVSS 6.5 (medium), 2017-10-05: Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This functionality…