CVE-2024-34148

CVSS v3.1 6.8 (Medium)

EPSS 0.04 % (10^th)

Advisories 2

NVD Status Awaiting Analysis

Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'.

Weaknesses

CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Related CVEs

CVE-2016-3721

CVE Status: PUBLISHED
NVD Status: Awaiting Analysis
CNA: Jenkins Project
Published Date: 2024-05-02 14:15:10
(4 months ago)
Updated Date: 2024-07-03 01:59:28
(2 months ago)