CVE-2022-29048

CWE-352 — Cross-Site Request Forgery (CSRF)7 documents7 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 61.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple MacosJenkins Project Jenkins Subversion PluginJenkins Subversion
Timeline
PublishedApr 12
Latest updateJul 20

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶CVEListV5jenkins_project/jenkins_subversion_pluginunspecified — 2.15.3
▶NVDjenkins/subversion2.15.3
▶NVDapple/macos12.0 — 12.5

🔴Vulnerability Details

3
OSV
CSRF vulnerability in Jenkins Subversion Plugin↗2022-04-13
▶
GHSA
CSRF vulnerability in Jenkins Subversion Plugin↗2022-04-13
▶
CVEList
CVE-2022-29048: A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2↗2022-04-12
▶

📋Vendor Advisories

3
Apple
CVE-2022-29048: macOS Monterey 12.5↗2022-07-20
▶
Jenkins
Jenkins Security Advisory 2022-04-12↗2022-04-12
▶
Red Hat
subversion: CSRF vulnerability in Jenkins Subversion Plugin↗2022-04-12
▶
CVE-2022-29048 (MEDIUM CVSS 4.3) | A cross-site request forgery (CSRF) | cvebase.io