org.jenkins-ci.plugins:pipeline-maven (>=0.5, <=2.2.1), org.jenkins-ci.plugins:pipeline-multibranch-defaults (1.1) +1 more potentially affected by CVE-2018-1000413 via org.jenkins-ci.plugins:config-file-provider (2.15.1)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =0.5, =0.9.0, =0.9.1 Source cves:...

org.jenkins-ci.plugins:nodejs (>=1.2.5, <=1.2.6) potentially affected by CVE-2018-1000413 via org.jenkins-ci.plugins:config-file-provider (2.16.4)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.5, =1.2.6 Source cves: CVE-2018-10004...

org.jenkins-ci.plugins:ivy (>=1.23, <=1.24) potentially affected by CVE-2018-1000413 via org.jenkins-ci.plugins:config-file-provider (2.5)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:ivy =1.23, =1.24 Source cves: CVE-2018-1000413 Sourc...

org.jenkins-ci.plugins:nodejs (>=1.2.2, <=1.2.4), org.jenkins-ci.plugins:pipeline-maven (>=3.0.0-beta-1, <=3.5.12) +1 more potentially affected by CVE-2018-1000413 via org.jenkins-ci.plugins:config-file-provider (2.16.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.2, =3.0.0-beta-1, =3.5.12 -...

org.jenkins-ci.plugins:jclouds-jenkins (>=2.14, <=2.22) potentially affected by CVE-2018-1000413 via org.jenkins-ci.plugins:config-file-provider (2.15.6)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:jclouds-jenkins =2.14, =2.22 Source cves:...

CVE-2018-1000413

A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly, providerlist.jelly that allows users with the ability to configure configuration files to insert arbitrary HTML into some pages in Jenkins...

com.lookout.jenkins:environment-script (1.2.5), org.jenkins-ci.plugins:ivy (>=1.23, <=2.2) +9 more potentially affected by CVE-2018-1000413 via org.jenkins-ci.plugins:config-file-provider (>=1.2, <=2.16.4)

org.jenkins-ci.plugins:config-file-provider MAVEN version =1.2, =1.23, =2.11, =1.25, =1.0, =1.5, =0.1-beta, =1.0, =0.9.0, =0.0.1, =1.4 Source cves: CVE-2018-1000413 Source advisory: MEND:CVE-2018-1000413...

CVE-2018-1000413

The vulnerability CVE-2018-1000413 affects Jenkins Config File Provider Plugin (versions ≤ 3.1). The issue is a cross-site scripting flaw in the configfiles.jelly and providerlist.jelly components that allows users who can configure configuration files to inject arbitrary HTML into Jenkins pages....

CVE-2017-1000413

CVE-2017-1000413 affects OP-TEE (Linaro) 2.4.0 and older. The root cause is a timing attack in the Montgomery portion of libMPA, enabling a compromised private RSA key. Documented impacts include potential exposure of private key material. Connected sources corroborate the same description; no ex...