CVE-2022-34785

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

CVE-2022-34818

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34818

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34817

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

CVE-2022-34815

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

CVE-2022-34815

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

CVE-2022-34815: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

CVE-2022-34818: Missing Authorization

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34817: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

CSRF vulnerability and missing permission checks in failedJobDeactivator allow disabling jobs

failedJobDeactivator 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints. This allows attackers with Overall/Read permission to disable jobs. Additionally, these endpoints do not require POST requests, resulting in a cross-site request forgery CSRF...

CSRF vulnerability in rrod

rrod 1.1.0 and earlier does not require POST requests for HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to accept pending requests, thereby renaming or deleting jobs. As of publication of this advisory, there is no fix. Learn why ...

Malicious code in remote-developer-jobs-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f03185f3f2f1ad0d64075fc4a6d14a5f9a607a713607990b5433c0f6d41b28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5742 Malicious code in remote-developer-jobs-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f03185f3f2f1ad0d64075fc4a6d14a5f9a607a713607990b5433c0f6d41b28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remote-dev-jobs-streamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5f1d86e52a908d4297ad2c989b9432b67179e88abd1e96fee8b9f1e00977a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-quantum-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a317fb1a82a0cb35c895319bf1077f69e7189c5321da3c76c2b8a6a6e2981846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1368 Malicious code in azure-quantum-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a317fb1a82a0cb35c895319bf1077f69e7189c5321da3c76c2b8a6a6e2981846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sam_jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6ebe40c7c29b62a287c9a45a67a5ba2c507f97752b8633ab67a36fe922305ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5561 Malicious code in quantum-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b528bd2f048349658faa44394ec64b5c186cbb76fc0bc2e1234fb8bfcf407c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in quantum-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b528bd2f048349658faa44394ec64b5c186cbb76fc0bc2e1234fb8bfcf407c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...