GHSA-m5cw-c64p-77h6MediumCVSS 4.3

CSRF vulnerability in Jenkins Subversion Plugin

Published
April 13, 2022
Last Modified
October 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-29048 →

📋 Description

Subversion Plugin 2.15.3 and earlier does not require POST requests for several form validation methods, resulting in cross-site request forgery (CSRF) vulnerabilities.

These vulnerabilities allow attackers to connect to an attacker-specified URL.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:subversion:< 2.15.4

🔗 References (6)