Medium · 4.3 CVE-2024-28158 EUVD-2024-1005GHSA-rv35-69ff-g9gv

Jenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request Forgery

Published Mar 6, 2024 · Updated Feb 13, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Subversion Partial Release Manager Plugin Package: org.jenkins-ci.plugins:svn-partial-release-mgr Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build.

Affected products

Vendor	Product	Affected	Fixed
Jenkins Project	Jenkins Subversion Partial Release Manager Plugin	≤ 1.0.1	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jenkins-ci.plugins:svn-partial-release-mgr	<= 1.0.1	—	GHSA-rv35-69ff-g9gv

Advisories 1

WID-SEC-2024-0564 Jenkins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026

References

Jenkins Security Advisory 2024-03-06 vendor-advisory
http://www.openwall.com/lists/oss-security/2024/03/06/3

EUVD	v3.1	4.3
OSV:GHSA	v3.1	4.3
CISA-ADP	v3.1	4.3