62 matches found
CVE-2024-34148
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'...
EUVD-2013-6197
Malware in sbrugna...
EUVD-2024-0969
Malicious code in bioql PyPI...
EUVD-2024-1005
Malicious code in bioql PyPI...
EUVD-2022-5390
Malicious code in bioql PyPI...
EUVD-2022-4893
Malicious code in bioql PyPI...
EUVD-2022-5541
Malicious code in bioql PyPI...
EUVD-2022-5703
Malicious code in bioql PyPI...
CVE-2024-28159
A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build...
CVE-2024-28158
A cross-site request forgery CSRF vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build...
CVE-2024-34148
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'...
CVE-2024-28159
A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build...
PT-2024-22304 · Jenkins · Jenkins Subversion Partial Release Manager Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Subversion Partial Release Manager Plugin versions 1.0.1 and earlier Description: A cross-site request forgery CSRF issue allows attackers to trigger a build. Recommendations: For Jenkins Subversion Partial Release Manager Plugin...
RHEL 7 / 8 : OpenShift Container Platform 4.6.59 (RHSA-2022:4947)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4947 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
subversion: Stored XSS vulnerabilities in Jenkins subversion plugin
A flaw was found in the Jenkins Subversion plugin. The Jenkins subversion plugin does not escape the name and description of List Subversion tags and parameters on views displaying the parameters. This issue results in a stored Cross-site scripting XSS vulnerability, exploitable by attackers with...
Vulnerabilities fixed in Red Hat OpenShift Container Platform
Multiple vulnerabilities have been fixed in the Red Hat OpenShift Container Platform. These vulnerabilities allow an attacker to able to perform a Cross-Site Scripting XSS attack on the subversion plugin of Jenkins or a denial-of-service DoS in GoLang. Red Hat has made updates available for Red H...
subversion: Stored XSS vulnerabilities in Jenkins subversion plugin
A flaw was found in the Jenkins Subversion plugin. The Jenkins subversion plugin does not escape the name and description of List Subversion tags and parameters on views displaying the parameters. This issue results in a stored Cross-site scripting XSS vulnerability, exploitable by attackers with...
org.jenkins-ci.plugins:artifactory (>=2.0.8, <=2.1.3), org.jenkins-ci.plugins:svn-revert-plugin (>=1.0, <=1.3) +1 more potentially affected by CVE-2021-21698 via org.jenkins-ci.plugins:subversion (1.37)
org.jenkins-ci.plugins:subversion MAVEN version 1.37 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - org.jenkins-ci.plugins:artifactory =2.0.8, =1.0, =1.0, =1.1 Source cves: CVE-2021-21698 Source...
org.jenkins-ci.plugins:googlecode (1.7) potentially affected by CVE-2020-2304 via org.jenkins-ci.plugins:subversion (1.36)
org.jenkins-ci.plugins:subversion MAVEN version 1.36 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - org.jenkins-ci.plugins:googlecode 1.7 Source cves: CVE-2020-2304 Source advisory:...
subversion: Stored XSS vulnerabilities in Jenkins subversion plugin
A flaw was found in the Jenkins Subversion plugin. The Jenkins subversion plugin does not escape the name and description of List Subversion tags and parameters on views displaying the parameters. This issue results in a stored Cross-site scripting XSS vulnerability, exploitable by attackers with...