~ / search / GHSA-wc2g-9j98-vcgw

GHSA-wc2g-9j98-vcgw

Jenkins Subversion Release Manager Plugin vulnerable to cross-site scripting (XSS)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-2152

Packages

EcosystemPackageAffectedFixed in
Maven org.jvnet.hudson.plugins:svn-release-mgr <= 1.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field form validation. This results in a reflected cross-site scripting vulnerability that can also be exploited similar to a stored cross-site scripting vulnerability by users with Job/Configure permission.

References

External links from the advisory. They lead to third-party sites.