CVE-2023-39151

A flaw was found in Jenkins, where Jenkins weekly and LTS are vulnerable to Cross-site scripting caused by the improper validation of user-supplied input. A remote, authenticated attacker can inject malicious script into a web page, which would be executed in a victim's Web browser within the...

com.cloudera.diskrecycler:diskcheck (0.20), com.cloudera.diskrecycler:drecycler (0.20) +43 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.532.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudera.diskrecycler:diskcheck 0.20 - com.cloudera.diskrecycler:drecycler 0.20 -...

org.jenkins-ci.main:jenkins-test-harness (1.556), org.jenkins-ci.main:jenkins-war (1.556) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.556)

org.jenkins-ci.main:jenkins-core MAVEN version 1.556 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.556 - org.jenkins-ci.main:jenkins-war 1.556 -...

com.amazonaws:codedeploy (>=1.3, <=1.11), com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (>=1.1.0, <=1.2.0) +18 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.554)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.3, =1.1.0, =1.2.3, =1.1.0, =1.0, =1.0, =1.0, =2.0.4, =1.10, =1.15,...

org.jenkins-ci.main:jenkins-war (1.532.2.jenkins-22395-diag) potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.532.2.jenkins-22395-diag)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.2.jenkins-22395-diag is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.532.2.jenkins-22395-diag Source cves:...

org.jenkins-ci.main:jenkins-war (1.648), org.jenkins-ci.main:test (1.648) +3 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.648)

org.jenkins-ci.main:jenkins-core MAVEN version 1.648 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.648 - org.jenkins-ci.main:test 1.648 -...

com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.16, <=0.17), org.jenkins-ci.main:jenkins-test-harness (1.407) +5 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.407)

org.jenkins-ci.main:jenkins-core MAVEN version 1.407 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck =0.16, =0.17 -...

com.cloudbees.jenkins.plugins:bees-sdk-plugin (>=1.0, <=1.2), com.cloudbees.jenkins.plugins:cloudbees-credentials (3.3) +48 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.509)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:bees-sdk-plugin =1.0, =0.1.0, =0.1-beta-1, =0.10, =13.5.0, =13.5....

com.tikalk.hudson.plugins:notification (1.10), org.jenkins-ci.main:jenkins-test-harness (1.605) +5 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.605)

org.jenkins-ci.main:jenkins-core MAVEN version 1.605 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification 1.10 - org.jenkins-ci.main:jenkins-test-harness 1.605 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.4), org.jenkins-ci.main:jenkins-war (1.424.4) +3 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.424.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.4 - org.jenkins-ci.main:jenkins-war 1.424.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.562), org.jenkins-ci.main:jenkins-war (1.562) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.562)

org.jenkins-ci.main:jenkins-core MAVEN version 1.562 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.562 - org.jenkins-ci.main:jenkins-war 1.562 -...

info.bluefloyd.jenkins:jenkins-jira-issue-updater (>=1.1, <=1.13), jenkins.ci.plugins.computerqueue:computer-queue-plugin (>=1.0, <=1.3) +6 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.437)

org.jenkins-ci.main:jenkins-core MAVEN version 1.437 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - info.bluefloyd.jenkins:jenkins-jira-issue-updater =1.1, =1.0, =1.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.512), org.jenkins-ci.main:jenkins-war (1.512) +4 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.512)

org.jenkins-ci.main:jenkins-core MAVEN version 1.512 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.512 - org.jenkins-ci.main:jenkins-war 1.512 -...

net.praqma:matrix-reloaded (>=1.0.2, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.418) +5 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.418)

org.jenkins-ci.main:jenkins-core MAVEN version 1.418 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:matrix-reloaded =1.0.2, =1.4, =1.5 - org.jenkins-ci.plugins:plugin 1.418 Source cves...

net.masterthought.jenkins:cucumber-reports (>=1.3.0, <=2.5.1), org.jenkins-ci.main:jenkins-test-harness (1.577) +21 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.577)

org.jenkins-ci.main:jenkins-core MAVEN version 1.577 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.masterthought.jenkins:cucumber-reports =1.3.0, =2.5.1 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.0.0, <=1.3.4), org.jenkins-ci.main:jenkins-test-harness (1.616) +2 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.616)

org.jenkins-ci.main:jenkins-core MAVEN version 1.616 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.0.0, =1.3.4 -...

jenkins.plugins.htmlaudio:html-audio-notifier (>=0.2, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.425) +13 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.425)

org.jenkins-ci.main:jenkins-core MAVEN version 1.425 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jenkins.plugins.htmlaudio:html-audio-notifier =0.2, =1.4, =0.11, =1.17, =1.0, =1.5, =1.7 Source...

org.jenkins-ci.main:jenkins-test-harness (1.543), org.jenkins-ci.main:jenkins-war (1.543) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.543)

org.jenkins-ci.main:jenkins-core MAVEN version 1.543 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.543 - org.jenkins-ci.main:jenkins-war 1.543 -...

com.arkea.satd:stoplightio-report (>=2.2.1, <=2.2.5), com.cloudbees.jenkins.plugins:container-slaves (1.0-beta-1) +89 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.609.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.609.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.arkea.satd:stoplightio-report =2.2.1, =0.5, =1.0-beta-2, =1.0, =1.1, =0.14.0, =0.14.0,...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...