Lucene search

GitHub Advisory DatabaseGHSA-RV35-69FF-G9GV

HistoryMar 06, 2024 - 6:30 p.m.

Jenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request Forgery

2024-03-0618:30:38

CWE-352

GitHub Advisory Database

github.com

jenkins

subversion

csrf

vulnerability

plugin

build

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build.

Affected configurations

Vulners

Node

org.jenkins-ci.pluginssvn-partial-release-mgrRange≤1.0.1

VendorProductVersionCPE
org.jenkins-ci.pluginssvn-partial-release-mgr*cpe:2.3:a:org.jenkins-ci.plugins:svn-partial-release-mgr:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
org.jenkins-ci.plugins	svn-partial-release-mgr	*	cpe:2.3:a:org.jenkins-ci.plugins:svn-partial-release-mgr::::::::

References

www.openwall.com/lists/oss-security/2024/03/06/3

github.com/advisories/GHSA-rv35-69ff-g9gv

nvd.nist.gov/vuln/detail/CVE-2024-28158

www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3325