Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

jenkinsci/subversion-plugin

              master @ 2f064ea
            

Fixes

CVEs

HIGH

Peak severity

30.0%

Coverage

Highlights

Auth Bypass: 7 prior fixes. Scrutinize any change in this area.

src/main/java/hudson/scm/SubversionSCM.java: most-fixed (12 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Frequent authorization failures occurred when rendering credentials dropdowns or validating connections due to missing or null-safety context checks, permitting unauthorized users to enumerate or use credentials. Checks must assert permissions against a valid contextual job rather than defaulting to system broad permissions.

Remote Code Execution: Agent-to-controller security bypasses allowed malicious build agents to execute arbitrary code on the Jenkins controller. This risk requires subclassing MasterToSlaveFileCallable or implementing rigorous RoleChecker validation in any callable tasks.

Cryptographic Issue: Legacy implementations relied on weak Scrambler.scramble (base64) encoding for credential storage, allowing local users to retrieve plain-text passwords and SSH private keys. Modern credentials must use the secure Jenkins Secret API wrap.