Jenkins Subversion Plugin Cross-Site Request Forgery vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-1000085 · ADVISORY
• jenkinsci/subversion-plugin · PACKAGE
• jenkins.io/security/advisory/2017-07-10 · WEB
• web.archive.org/web/20171119065136/http://www.securityfocus.com/bid/99574 · WEB
• securityfocus.com/bid/99574 · Third Party Advisory
• jenkins.io/security/advisory/2017-07-10 · Vendor Advisory

org.jenkins-ci.plugins:subversion のその他の脆弱性

• CVE-2022-29048中 4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker…
• CVE-2022-29046中 5.4Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views…
• CVE-2021-21698高 7.5Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller fr…
• CVE-2020-2304中 6.5Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
• CVE-2020-2111中 5.4Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, re…