Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_subversion_partial_release_manager_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Subversion Partial Release Manager Plugin (dff6e27e-db22-59b4-a8eb-bd13c432ef8c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-34148 vulnerable 2026-06-08 06:37:32.975349 Details available
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'.
Published: 2024-05-02T13:28:05.952Z
Updated: 2025-02-13T17:52:27.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28159 vulnerable 2026-06-08 06:33:26.602199 Details available
A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build.
Published: 2024-03-06T17:02:00.731Z
Updated: 2025-02-13T17:47:23.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28158 vulnerable 2026-06-08 06:33:26.599336 Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build.
Published: 2024-03-06T17:01:59.995Z
Updated: 2025-02-13T17:47:23.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2199 vulnerable 2026-06-08 05:24:59.075054 Details available
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository URL field form validation, resulting in a reflected cross-site scripting vulnerability.
Published: 2020-06-03T12:40:26.000Z
Updated: 2024-08-04T07:01:41.151Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.