6.8
Moyenne
CVE-2024-34148 Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for…
Description
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Subversion Partial Release Manager Plugin 1.0 | premières → 1.0.1 | Pas de correctif indiqué |
| jenkins 1.0 | premières → 1.0.1 | Pas de correctif indiqué |
Autres CVE de Jenkins Subversion Partial Release Manager Plugin
Les 4 CVE de Jenkins Subversion Partial Release Manager Plugin →
CVE-2024-28159
A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers…
4.3
Moyenne
CVE-2024-28158
A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier…
4.3
Moyenne
CVE-2020-2199
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository…
Non notée