CVE-2024-34148: Jenkins Subversion Partial Release Manager

Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'.

Affected products

• Jenkins Subversion Partial Release Manager: up to and including 1.0.1

Published 2024-05-02. Last modified 2026-06-17.