6.8
Medium
CVE-2024-34148 Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for…
Description
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Subversion Partial Release Manager Plugin 1.0 | earliest → 1.0.1 | No fix stated |
| jenkins 1.0 | earliest → 1.0.1 | No fix stated |
Other CVEs of Jenkins Subversion Partial Release Manager Plugin
The 4 CVEs of Jenkins Subversion Partial Release Manager Plugin →
CVE-2024-28159
A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers…
4.3
Medium
CVE-2024-28158
A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier…
4.3
Medium
CVE-2020-2199
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository…
Not rated