cve.bz

CVE-2013-6372

no score yetEPSS 0.5%

jenkins-ci subversion-plugin: no CVSS score yet. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:subversion 1.54.

The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.
EPSS
0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE
CWE-255
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-c4fr-gx5w-8qf2Mavenorg.jenkins-ci.plugins:subversion<1.541.54

References

Check your stackJSON