Jenkins Project Jenkins Subversion Partial Release Manager Plugin vulnerabilities
4 known vulnerabilities affecting jenkins_project/jenkins_subversion_partial_release_manager_plugin.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM4
Vulnerabilities
Page 1 of 1
CVE-2020-2199P4MEDIUMCVSS 6.1≥ unspecified, ≤ 1.0.12020-06-03
CVE-2020-2199 [MEDIUM] CWE-79 CVE-2020-2199: Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error messag
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository URL field form validation, resulting in a reflected cross-site scripting vulnerability.
nvd
CVE-2016-3721P4MEDIUMCVSS 4.3≤ 1.0.12016-05-17
CVE-2016-3721 [MEDIUM] CWE-17 CVE-2016-3721: Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.
nvd
CVE-2024-28159P4MEDIUMCVSS 4.3≤ 1.0.12024-03-06
CVE-2024-28159 [MEDIUM] CWE-862 CVE-2024-28159: A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier al
A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build.
nvd
CVE-2024-28158P4MEDIUMCVSS 4.3≤ 1.0.12024-03-06
CVE-2024-28158 [MEDIUM] CWE-352 CVE-2024-28158: A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plug
A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build.
nvd