Jenkins project Jenkins Subversion Plugin
5 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-29048 | unspecified – 2.15.3 | A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker | MEDIUM 4.3 | 1.9 % | ||
| CVE-2022-29046 | unspecified – 2.15.3 | Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views | MEDIUM 5.4 | 2.5 % | ||
| CVE-2021-21698 | unspecified – 2.15.0 | Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller fr | HIGH 7.5 | 2.1 % | ||
| CVE-2020-2304 | unspecified – 2.13.1 | Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. | MEDIUM 6.5 | 1.5 % | ||
| CVE-2020-2111 | unspecified – 2.13.0 | Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, re | MEDIUM 5.4 | 0.9 % |