Описание
CSRF vulnerability in Jenkins Subversion Plugin
Subversion Plugin 2.15.3 and earlier does not require POST requests for several form validation methods, resulting in cross-site request forgery (CSRF) vulnerabilities.
These vulnerabilities allow attackers to connect to an attacker-specified URL.
Пакеты
Наименование
org.jenkins-ci.plugins:subversion
maven
Затронутые версииВерсия исправления
< 2.15.4
2.15.4
Связанные уязвимости
CVSS3: 4.3
redhat
больше 4 лет назад
A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.
CVSS3: 4.3
nvd
больше 4 лет назад
A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.