Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/subversion@2.13.1
purl pkg:maven/org.jenkins-ci.plugins/subversion@2.13.1
Next non-vulnerable version 2.13.2
Latest non-vulnerable version 2.15.4
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-vp12-7b76-efg7
Aliases:
CVE-2020-2304
GHSA-vp5f-8jgw-j53c
XXE vulnerability in Jenkins Subversion Plugin Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. This allows attackers able to control an agent process to have Jenkins parse a crafted changelog file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery. Jenkins Subversion Plugin 2.13.2 disables external entity resolution for its XML parser.
2.13.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-6gvv-5195-cbhh Subversion Plugin stored XSS vulnerability Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, resulting in a stored cross-site scripting vulnerability. Subversion Plugin 2.13.1 escapes the affected part of the error message. CVE-2020-2111
GHSA-x3pr-fcgm-wjgc

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:32:29.020917+00:00 GHSA Importer Fixing VCID-6gvv-5195-cbhh https://github.com/advisories/GHSA-x3pr-fcgm-wjgc 38.1.0
2026-04-02T12:37:36.475745+00:00 GitLab Importer Affected by VCID-vp12-7b76-efg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/subversion/CVE-2020-2304.yml 38.0.0
2026-04-02T12:36:24.396571+00:00 GitLab Importer Fixing VCID-6gvv-5195-cbhh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/subversion/CVE-2020-2111.yml 38.0.0
2026-04-01T13:09:55.397890+00:00 GithubOSV Importer Fixing VCID-6gvv-5195-cbhh https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-x3pr-fcgm-wjgc/GHSA-x3pr-fcgm-wjgc.json 38.0.0