Lucene search
+L

2786 matches found

Prion
Prion
•added 2024/03/06 5:15 p.m.•58 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build...

6.6AI score0.00306EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/06 5:15 p.m.•48 views

Information disclosure

A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build...

6.5AI score0.00495EPSS
SaveExploits0References1
Mend
Mend
•added 2024/03/06 5:02 p.m.•2 views

CVE-2024-28159

A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build...

5.3CVSS0.00495EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/03/06 5:02 p.m.•55 views

CVE-2024-28159

A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build...

6.5AI score0.00495EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/06 5:02 p.m.•20 views

CVE-2024-28159

A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build...

6.5AI score0.00495EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/06 5:02 p.m.•106 views

CVE-2024-28159

The Jenkins Subversion Partial Release Manager Plugin versions 1.0.1 and earlier contain a missing permission check. This vulnerability allows attackers who possess Item/Read permissions to trigger a build . Exploitation details are not provided in the documents.

4.3CVSS6.4AI score0.00495EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2024/03/06 5:01 p.m.•2 views

CVE-2024-28158

A cross-site request forgery CSRF vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build...

5.3CVSS0.00306EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/03/06 5:01 p.m.•17 views

CVE-2024-28158

A cross-site request forgery CSRF vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build...

6.7AI score0.00306EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/06 5:01 p.m.•114 views

CVE-2024-28158

The Jenkins Subversion Partial Release Manager Plugin (version 1.0.1 and earlier) is vulnerable to a cross-site request forgery (CSRF) . This flaw allows an attacker to trigger a build on the Jenkins server. Exploitation details and specific remediation steps are not provided in the documents.

4.3CVSS6.5AI score0.00306EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/03/06 5:01 p.m.•58 views

CVE-2024-28158

A cross-site request forgery CSRF vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build...

6.6AI score0.00306EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/06 11:05 a.m.•46 views

BIT-SUBVERSION-2020-17525 Remote unauthenticated denial-of-service in Subversion mod_authz_svn

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

7.5CVSS7.3AI score0.40075EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/06 11:05 a.m.•45 views

BIT-SUBVERSION-2021-28544 Apache Subversion SVN authz protected copyfrom paths regression

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization authz rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom...

4.3CVSS5.8AI score0.02788EPSS
SaveExploits1References7
OSV
OSV
•added 2024/03/06 11:05 a.m.•33 views

BIT-SUBVERSION-2022-24070 Apache Subversion mod_dav_svn is vulnerable to memory corruption

Subversion's moddavsvn is vulnerable to memory corruption. While looking up path-based authorization rules, moddavsvn servers may attempt to use memory which has already been freed. Affected Subversion moddavsvn servers 1.10.0 through 1.14.1 inclusive. Servers that do not use moddavsvn are not...

7.5CVSS6.8AI score0.09473EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/03/06 12:00 a.m.•17 views

Jenkins Subversion Partial Release Manager Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS6.6AI score0.00495EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/06 12:00 a.m.•20 views

PT-2024-22304 · Jenkins · Jenkins Subversion Partial Release Manager Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Subversion Partial Release Manager Plugin versions 1.0.1 and earlier Description: A cross-site request forgery CSRF issue allows attackers to trigger a build. Recommendations: For Jenkins Subversion Partial Release Manager Plugin...

4.3CVSS6AI score0.00306EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/03/06 12:00 a.m.•19 views

PT-2024-22305 · Jenkins · Jenkins Subversion Partial Release Manager Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Subversion Partial Release Manager Plugin versions 1.0.1 and earlier Description: A missing permission check in the plugin allows attackers with Item/Read permission to trigger a build. Recommendations: For Jenkins Subversion Partial...

4.3CVSS6AI score0.00495EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/03/06 12:00 a.m.•20 views

Jenkins Subversion Partial Release Manager Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS6.7AI score0.00306EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•3 views

CVE-2024-28159: Missing Authorization

A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build...

4.3CVSS5.8AI score0.00495EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•5 views

CVE-2024-28158: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build...

4.3CVSS5.8AI score0.00306EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/02/29 12:00 a.m.•39 views

CentOS 9 : subversion-1.14.1-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the subversion-1.14.1-5.el9 build changelog. - Subversion's moddavsvn is vulnerable to memory corruption. While looking up path-based authorization rules, moddavsvn servers may attempt to u...

7.5CVSS6.8AI score0.09473EPSS
SaveExploits0References2
Rows per page
Query Builder