Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/subversion@2.13.2
purl pkg:maven/org.jenkins-ci.plugins/subversion@2.13.2
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-vp12-7b76-efg7 XXE vulnerability in Jenkins Subversion Plugin Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. This allows attackers able to control an agent process to have Jenkins parse a crafted changelog file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery. Jenkins Subversion Plugin 2.13.2 disables external entity resolution for its XML parser. CVE-2020-2304
GHSA-vp5f-8jgw-j53c

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T12:37:36.479621+00:00 GitLab Importer Fixing VCID-vp12-7b76-efg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/subversion/CVE-2020-2304.yml 38.0.0
2026-04-01T16:01:49.811536+00:00 GHSA Importer Fixing VCID-vp12-7b76-efg7 https://github.com/advisories/GHSA-vp5f-8jgw-j53c 38.0.0
2026-04-01T13:09:36.740737+00:00 GithubOSV Importer Fixing VCID-vp12-7b76-efg7 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-vp5f-8jgw-j53c/GHSA-vp5f-8jgw-j53c.json 38.0.0