Medium severity4.3NVD Advisory· Published Apr 12, 2022· Updated Jun 17, 2026

CVE-2022-29048

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:subversionMaven	< 2.15.4	2.15.4

Affected products

Jenkins Project/Subversion
cpe:2.3:a:jenkins:subversion:*:*:*:*:*:jenkins:*:*
Range: <=2.15.3
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: >=12.0,<12.5
ghsa-coords
pkg:maven/org.jenkins-ci.plugins/subversion
Range: < 2.15.4
Jenkins Project/Subversion Plugincpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2022/Jul/18nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-m5cw-c64p-77h6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-29048ghsaADVISORY
support.apple.com/kb/HT213345nvdThird Party AdvisoryWEB
www.jenkins.io/security/advisory/2022-04-12/nvdVendor AdvisoryWEB
github.com/jenkinsci/subversion-plugin/commit/882a7d359f6ac73c53d787bff4d62eba837001eaghsaWEB

News mentions

Jenkins Security Advisory 2022-04-12
Jenkins Security Advisories · Apr 12, 2022

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000