Sign in

Not rated

CVE-2020-2304 Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE)…

Description

Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Subversion Plugin 2.13	earliest → 2.13.1	No fix stated

The 5 CVEs of Jenkins Subversion Plugin →

CVE-2022-29048 A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to… Not rated CVE-2022-29046 Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more)… Not rated CVE-2021-21698 Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key… Not rated CVE-2020-2111 Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field… Not rated

Do you use Jenkins Subversion Plugin?

Track this CVE Watch Jenkins Subversion Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2020-2304

Timeline

Published November 4, 2020
Last modified August 4, 2024

References

www.jenkins.io www.jenkins.io
[oss-security] 20201104 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE