173 matches found
CVE-2021-21633: Cross-Site Request Forgery (CSRF)
A cross-site request forgery CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...
Jenkins OWASP Dependency-Track 跨站请求伪造漏洞
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...
CVE-2021-21632: Missing Authorization
A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...
CSRF vulnerability and missing permission checks in dependency-track allow capturing credentials
dependency-track 3.1.0 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing "Secret text" credentials...
frontend
!Build Statushttps://github.com/DependencyTrack/frontend/act...
CVE-2019-1020007
Dependency-Track before 3.5.1 allows XSS...
CVE-2019-1020007
Dependency-Track before 3.5.1 allows XSS...
Cross site scripting
Dependency-Track before 3.5.1 allows XSS...
CVE-2019-1020007
Dependency-Track before 3.5.1 allows XSS...
CVE-2019-1020007
Dependency-Track (before version 3.5.1) is affected by CVE-2019-1020007, a cross-site scripting (XSS) vulnerability. The connected documents confirm XSS but do not provide details on root cause, exploit specifics, or a listed fix within the provided data.
CVE-2019-1020007
Dependency-Track before 3.5.1 allows XSS...
PT-2019-11623
Name of the Vulnerable Software and Affected Versions: Dependency-Track versions prior to 3.5.1 Description: The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. Recommendations: For versions prior to 3.5.1, update...