CVE-2022-29048: 
Java vulnerability analysis and mitigation

A cross-site request forgery (CSRF) vulnerability was discovered in Jenkins Subversion Plugin versions 2.15.3 and earlier. The vulnerability was identified and disclosed on April 12, 2022. This security issue affects the Jenkins Subversion Plugin, which is a component that provides Subversion integration for Jenkins (Jenkins Advisory).

The vulnerability stems from the plugin's form validation methods not requiring POST requests. This implementation flaw results in cross-site request forgery (CSRF) vulnerabilities. The severity of this vulnerability is rated as Medium according to the CVSS scoring system (Jenkins Advisory).

The vulnerability allows attackers to connect to an attacker-specified URL through CSRF attacks. This could potentially lead to unauthorized connections being established through the plugin (Jenkins Advisory).

The vulnerability can be exploited by attackers who can trick authenticated users into visiting maliciously crafted web pages. The CSRF attack vector makes it possible to perform actions without the user's explicit consent (Jenkins Advisory).

The vulnerability has been fixed in Subversion Plugin version 2.15.4, which requires POST requests for the affected form validation methods. Users are advised to upgrade to this version or later to mitigate the vulnerability (Jenkins Advisory).