1474 matches found
Artifact Hub Path Traversal Vulnerability
Artifact Hub is a web-based application that finds, installs, and distributes packages and configurations for CNCF projects. A security vulnerability exists in Artifact Hub that stems from the ability to read internal files through the use of symbolic links loaded into certain types of repositori...
PT-2023-29712
Name of the Vulnerable Software and Affected Versions Artifact Hub versions prior to 1.16.0 Description Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. A security researcher identified a bug in which by using...
The vulnerability of the Jenkins Maven Artifact ChoiceListProvider plugin in Nexus, related to insufficient protection of registration data, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Jenkins Maven Artifact ChoiceListProvider plugin Nexus is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
Microsoft Error Reporting Local Privilege Elevation Exploit
This Metasploit module takes advantage of a bug in the way Windows error reporting opens the report parser. If you open a report, Windows uses a relative path to locate the rendering program. By creating a specific alternate directory structure, we can coerce Windows into opening an arbitrary...
CVE-2023-38508
Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, the preview of an artifact link with a type does not respect the project,...
Information disclosure
Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, the preview of an artifact link with a type does not respect the project,...
CVE-2023-38508 Tuleap allows preview of a linked artifact with a type does not respect permissions
Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, the preview of an artifact link with a type does not respect the project,...
CVE-2023-38508 Tuleap allows preview of a linked artifact with a type does not respect permissions
Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, the preview of an artifact link with a type does not respect the project,...
CVE-2023-38508 Tuleap allows preview of a linked artifact with a type does not respect permissions
Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, the preview of an artifact link with a type does not respect the project,...
Improper Access Control
maven-artifact-choicelistprovider is vulnerable to Improper Access Control. The vulnerability exists because the library does not set the appropriate context for credentials lookup, which allows an attacker with Item or Configure permission to access and capture credentials they are not entitled ...
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials
Jenkins Maven Artifact ChoiceListProvider Nexus Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to access and...
GHSA-97MG-9JHF-R7RM Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials
Jenkins Maven Artifact ChoiceListProvider Nexus Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to access and...
CVE-2023-40347
Jenkins Maven Artifact ChoiceListProvider Nexus Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...
Design/Logic Flaw
Jenkins Maven Artifact ChoiceListProvider Nexus Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...
CVE-2023-40347
Jenkins Maven Artifact ChoiceListProvider Nexus Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...
CVE-2023-40347
Jenkins Maven Artifact ChoiceListProvider Nexus Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...
CVE-2023-40347
The CVE-2023-40347 entry concerns the Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin, affected in versions 1.14 and earlier. The root cause is that the plugin does not set the appropriate context for credentials lookup, enabling attackers with Item/Configure permission to access and cap...
PT-2023-5742 · Jenkins · Jenkins Maven Artifact Choicelistprovider (Nexus) Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Maven Artifact ChoiceListProvider Nexus Plugin versions 1.14 and earlier Description: The issue is related to insufficient protection of registration data, allowing attackers with Item/Configure permission to access and capture...
Jenkins Plugin Maven Artifact ChoiceListProvider 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...