~ / search / GHSA-mr9j-qqjh-67f2

GHSA-mr9j-qqjh-67f2

Jenkins Subversion Partial Release Manager Plugin missing permission check

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-28159

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:svn-partial-release-mgr <= 1.0.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build.

References

External links from the advisory. They lead to third-party sites.