CVE-2022-29048: Apple macOS

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.

Affected products

• Apple macOS: from 12.0, before 12.5 (fixed in 12.5)
• Jenkins Subversion: up to and including 2.15.3

Published 2022-04-12. Last modified 2026-06-17.