Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 4:03 p.m.•23 views

CVE-2020-2281

A cross-site request forgery CSRF vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources...

5.8CVSS6.7AI score0.00669EPSS
SaveExploits0
OSV
OSV
•added 2020/09/23 2:15 p.m.•28 views

CVE-2020-2281

A cross-site request forgery CSRF vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources...

5.4CVSS6.7AI score
SaveExploits0References2
Mend
Mend
•added 2020/09/23 1:10 p.m.•2 views

CVE-2020-2281

A cross-site request forgery CSRF vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources...

5.8CVSS0.00669EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/23 12:00 a.m.•8 views

CVE-2020-2281: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources...

5.8CVSS5.7AI score0.00669EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/07/11 12:00 a.m.•23 views

The vulnerability of the Jenkins Lockable Resources plugin arises from the lack of protective measures for website structures, allowing attackers to inject arbitrary JavaScript code into loaded web pages.

The vulnerability of the Jenkins Lockable Resources plugin exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code into the web pages displayed by the plugin...

6.4CVSS5.7AI score0.01367EPSS
SaveExploits0References4Affected Software2
Mend
Mend
•added 2019/03/28 5:59 p.m.•3 views

CVE-2019-1003042

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin...

5.4CVSS0.01367EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/28 12:00 a.m.•5 views

CVE-2019-1003042: Improper Neutralization of Input During Web Page Generation

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin...

5.4CVSS5.2AI score0.01367EPSS
SaveExploits0References2
Rows per page
Query Builder