Jenkins Subversion Plugin (Jenkins Project) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-04-12. Vendor: Jenkins Project.

CVEs of Jenkins Subversion Plugin

• CVE-2022-29048 - CVSS 4.3 (medium), 2022-04-12: A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.
• CVE-2022-29046 - CVSS 5.4 (medium), 2022-04-12: Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying…
• CVE-2021-21698 - CVSS 7.5 (high), 2021-11-04: Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent.
• CVE-2020-2304 - CVSS 6.5 (medium), 2020-11-04: Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
• CVE-2020-2111 - CVSS 5.4 (medium), 2020-02-12: Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, resulting in a…