Not rated
CVE-2020-2199 Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository…
Description
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository URL field form validation, resulting in a reflected cross-site scripting vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Subversion Partial Release Manager Plugin 1.0 | earliest → 1.0.1 | No fix stated |
Other CVEs of Jenkins Subversion Partial Release Manager Plugin
The 4 CVEs of Jenkins Subversion Partial Release Manager Plugin →
CVE-2024-34148
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for…
6.8
Medium
CVE-2024-28159
A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers…
4.3
Medium
CVE-2024-28158
A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier…
4.3
Medium