org.jenkins-ci.plugins:subversion

8 results · Clear filters · Feed

• Medium 4.3
  CVE-2022-29048

  CSRF vulnerability in Jenkins Subversion Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.

  Jenkins Project Jenkins Subversion Plugin subversion org.jenkins-ci.plugins:subversion Web / CMS Azure Linux Maven
  Apr 12, 2022
• Medium 5.4
  CVE-2022-29046

  Stored Cross-site Scripting vulnerability in Jenkins Subversion Plugin

  Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with It…

  Jenkins Project Jenkins Subversion Plugin subversion org.jenkins-ci.plugins:subversion Web / CMS Azure Linux Maven
  Apr 12, 2022
• Medium 6.5
  CVE-2021-21698

  Path traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files

  Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent.

  Jenkins Project Jenkins Subversion Plugin subversion org.jenkins-ci.plugins:subversion Web / CMS Azure Linux Maven
  Nov 4, 2021
• Medium 6.5
  CVE-2020-2304

  XXE vulnerability in Jenkins Subversion Plugin

  Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  Jenkins Project Jenkins Subversion Plugin subversion org.jenkins-ci.plugins:subversion Web / CMS Azure Linux Maven
  Nov 4, 2020
• Medium 5.4
  CVE-2020-2111

  Subversion Plugin stored XSS vulnerability

  Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, resulting in a stored cross-site scripting vulnerability.

  Jenkins Project Jenkins Subversion Plugin subversion org.jenkins-ci.plugins:subversion Web / CMS Azure Linux Maven
  Feb 12, 2020
• Medium 5.3
  CVE-2018-1000111

  Jenkins Subversion Plugin Incorrect Authorization vulnerability

  An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users.

  subversion org.jenkins-ci.plugins:subversion Azure Linux Maven
  Mar 13, 2018
• Medium 6.5
  CVE-2017-1000085

  Jenkins Subversion Plugin Cross-Site Request Forgery vulnerability

  Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This functionality improperly checked permissions, allowing any user with Item/Build permission (but not Item/Configure) to conn…

  subversion org.jenkins-ci.plugins:subversion Azure Linux Maven
  Oct 4, 2017
• Medium —
  CVE-2013-6372

  Jenkins Subversion Plugin Stores Credentials with Base64 Encoding

  The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.

  org.jenkins-ci.plugins:subversion Maven
  May 8, 2014