Not rated
CVE-2020-2111 Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field…
Description
Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, resulting in a stored cross-site scripting vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Subversion Plugin 2.13 | earliest → 2.13.0 | No fix stated |
Other CVEs of Jenkins Subversion Plugin
The 5 CVEs of Jenkins Subversion Plugin →
CVE-2022-29048
A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to…
Not rated
CVE-2022-29046
Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more)…
Not rated
CVE-2021-21698
Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key…
Not rated
CVE-2020-2304
Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE)…
Not rated