Moderate severityNVD Advisory· Published Apr 12, 2022· Updated Nov 20, 2024
CVE-2022-29048
CVE-2022-29048
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:subversionMaven | < 2.15.4 | 2.15.4 |
Affected products
2- Range: unspecified
Patches
Vulnerability mechanics
Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
6- github.com/advisories/GHSA-m5cw-c64p-77h6ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-29048ghsaADVISORY
- seclists.org/fulldisclosure/2022/Jul/18ghsamailing-listx_refsource_FULLDISCWEB
- github.com/jenkinsci/subversion-plugin/commit/882a7d359f6ac73c53d787bff4d62eba837001eaghsaWEB
- support.apple.com/kb/HT213345ghsax_refsource_CONFIRMWEB
- www.jenkins.io/security/advisory/2022-04-12/ghsax_refsource_CONFIRMWEB
News mentions
1- Jenkins Security Advisory 2022-04-12Jenkins Security Advisories · Apr 12, 2022