CSRF vulnerability in Jenkins Subversion Plugin

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-29048 · ADVISORY
• jenkinsci/subversion-plugin commit 882a7d3 · WEB
• jenkinsci/subversion-plugin · PACKAGE
• support.apple.com/kb/HT213345 · WEB
• jenkins.io/security/advisory/2022-04-12 · WEB
• seclists.org/fulldisclosure/2022/Jul/18 · WEB

Autres vulnérabilités de org.jenkins-ci.plugins:subversion

• CVE-2022-29046MOYENNE 5.4Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views…
• CVE-2021-21698ÉLEVÉE 7.5Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller fr…
• CVE-2020-2304MOYENNE 6.5Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
• CVE-2020-2111MOYENNE 5.4Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, re…
• CVE-2018-1000111MOYENNE 5.3An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and Subversi…