Jenkins project Jenkins Subversion Plugin
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-29048 | unspecified – 2.15.3 | A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker | MEDIUM 4.3 | 1.9 % | ||
| CVE-2022-29046 | unspecified – 2.15.3 | Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views | MEDIUM 5.4 | 2.5 % | ||
| CVE-2021-21698 | unspecified – 2.15.0 | Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller fr | HIGH 7.5 | 2.1 % | ||
| CVE-2020-2304 | unspecified – 2.13.1 | Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. | MEDIUM 6.5 | 1.5 % | ||
| CVE-2020-2111 | unspecified – 2.13.0 | Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, re | MEDIUM 5.4 | 0.9 % |