Known vulnerabilities in Jenkins Subversion Plugin

Vendor: Jenkins
Software CPE: cpe:2.3:a:jenkins:jenkins_subversion_plugin:*:*:*:*:*:jenkins:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jenkins Subversion Plugin Jenkins Subversion Plugin is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62306 - Cross-Site Request Forgery (CSRF)
CVE-2022-29048
CWE-352 Low
No
No
2.15.4 13.04.2022 SB2022041333
SB2022072101
#VU62304 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29046
CWE-79 Low
No
No
2.15.4 13.04.2022 SB2022041333
SB2022053122
SB2022061218
and 3 more
#VU57991 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21698
CWE-22 Medium
No
No
2.15.1 08.11.2021 SB2021110804
SB2021112915
SB2021113017
and 3 more
#VU48231 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-2304
CWE-611 Medium
No
No
2.13.2 04.11.2020 SB2020110942
SB2021020406
#VU25281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2111
CWE-79 Low
No
No
2.13.1 13.02.2020 SB2020021304
SB2020063006
SB2020061842
and 1 more