479 matches found
CVE-2022-27205
CVE-2022-27205 concerns Jenkins Extended Choice Parameter Plugin (346.vd87693c5a_86c and earlier). The root cause is a missing permission check on form validation methods, allowing attackers with Overall/Read permission to connect to an attacker-specified URL (SSRF). The vulnerability is document...
CVE-2022-27205
A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2022-27205
A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2022-27205
A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2022-27204
CVE-2022-27204 affects the Jenkins Extended Choice Parameter Plugin (346.vd87693c5a_86c and earlier). The vulnerability is a cross-site request forgery (CSRF) flaw caused by missing permission checks on form validation methods, allowing attackers with Overall/Read permission to connect to an atta...
CVE-2022-27204
A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers to connect to an attacker-specified URL...
com.cloudbees.jenkins.plugins:custom-tools-plugin (>=0.4, <=0.6) potentially affected by CVE-2022-27204 via org.jenkins-ci.plugins:extended-choice-parameter (0.28)
org.jenkins-ci.plugins:extended-choice-parameter MAVEN version 0.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:extended-choice-parameter and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin =0.4, =0.6...
CVE-2022-27204
A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers to connect to an attacker-specified URL...
CVE-2022-27204
A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers to connect to an attacker-specified URL...
CVE-2022-27203
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller...
CVE-2022-27203
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller...
CVE-2022-27203
CVE-2022-27203 affects Jenkins Extended Choice Parameter Plugin (346.vd87693c5a_86c and earlier). The vulnerability arises from a flaw in the plugin that allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files located on the Jenkins controller....
CVE-2022-27203
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller...
CVE-2022-27202
CVE-2022-27202 concerns Jenkins Extended Choice Parameter Plugin (version 346.vd87693c5a_86c and earlier). The root cause is that the plugin does not escape the value and description of Extended Choice parameters of radio buttons or check boxes, allowing stored cross-site scripting (XSS). Exploit...
CVE-2022-27202
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-27202
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-27202
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
PT-2022-18290 · Jenkins · Jenkins Extended Choice Parameter Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Extended Choice Parameter Plugin versions 346.vd87693c5a 86c and earlier Description: The issue allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller...
CVE-2022-27205: Missing Authorization
A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
Jenkins Plugin Extended Choice Parameter: Path traversal vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Extended Choice Parameter Plugin...