com.compuware.jenkins:compuware-common-configuration (>=1.0.2, <=1.0.11), com.compuware.jenkins:compuware-scm-downloader (>=2.0.0, <=2.0.5) +3 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.0.4)

org.jenkins-ci.plugins:credentials MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.compuware.jenkins:compuware-common-configuration =1.0.2, =2.0.0, =2.0, =1.0.2, =1.0.0,...

CVE-2022-41226

CVE-2022-41226 affects Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier. The connected sources confirm the root cause is that the plugin’s XML parser is not configured to mitigate XML External Entity (XXE) attacks. This can enable XXE in parsing XML data, with the documented impli...

CVE-2022-41226

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-41226: Improper Restriction of XML External Entity Reference

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

Jenkins Compuware Common Configuration Plugin 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +278 more potentially affected by CVE-2020-2105 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2020-2105 Source advisory: GHSA-7XP8-7WQX-5HQX...