[JENKINS-44885] DOS attacks to Subcersion System when credentials have changed

We are using Jenkins with the subversion plugin. After having entered the right svn access credentials, the SVN checkout takes place and the projects are build. If the credentials are changed on Subversion side after at least one successfull checkout from Jenkins, then the subversion-plugin fires about 40 times per second against the SVN server without stopping.

Currently we have about 500 Jenkins Installations and are planing several Jenkins enterprise versions. This behaviour is worriing us alot. I have reported this behaviour already back in 2012 but nothing happened up to now.

Please have a look at it since user credentials are often changed and we already had some serious issues with this problem.

---
Originally reported by cdovas, imported from: DOS attacks to Subcersion System when credentials have changed

• status: Open
  
• priority: Blocker
  
• component(s): subversion-plugin
  
• label(s): jenkins, subversion-plugin, svn
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 2
  
• imported: 20251212-090250
  

Raw content of original issue

We are using Jenkins with the subversion plugin. After having entered the right svn access credentials, the SVN checkout takes place and the projects are build. If the credentials are changed on Subversion side after at least one successfull checkout from Jenkins, then the subversion-plugin fires about 40 times per second against the SVN server without stopping.


Currently we have about 500 Jenkins Installations and are planing several Jenkins enterprise versions. This behaviour is worriing us alot. I have reported this behaviour already back in 2012 but nothing happened up to now.


Please have a look at it since user credentials are often changed and we already had some serious issues with this problem.

• environment: Jenkins 2.x, Java 1.8.x