com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

com.amazonaws:codedeploy (>=1.17, <=1.23), hudson.plugins.octopusdeploy:octopusdeploy (>=1.3.0, <=1.4.0) +6 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.612)

org.jenkins-ci.main:jenkins-core MAVEN version 1.612 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.17, =1.3.0, =2.7.0, =1.0, =1.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.588), org.jenkins-ci.main:jenkins-war (1.588) +1 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.588)

org.jenkins-ci.main:jenkins-core MAVEN version 1.588 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.588 - org.jenkins-ci.main:jenkins-war 1.588 -...

org.jenkins-ci.main:jenkins-test-harness (1.594), org.jenkins-ci.main:jenkins-war (1.594) +2 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.594)

org.jenkins-ci.main:jenkins-core MAVEN version 1.594 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.594 - org.jenkins-ci.main:jenkins-war 1.594 -...

RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3198)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3198 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +1391 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (2.5.6.sec03)

org.springframework:spring-web MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.0, =1.0, =0.0.1, =0.1.1...

Jenkins plugins Multiple Vulnerabilities (2023-10-25)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - High GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes. This results in a stor...

Vulnerabilities fixed in Jenkins (core) and plugins

Vulnerabilities have been fixed in Jenkins and some plugins, such as Bazaar, GitLab Authentication and Gradle. A malicious person could exploit the vulnerabilities to perform a Cross-Site-Scripting attack XSS, or a Cross-Site-Request-Forgery CSRF. Such an attack can lead to execution of arbitrary...

org.jenkins-ci.main:jenkins-test-harness (1.537), org.jenkins-ci.main:jenkins-war (1.537) +2 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.537)

org.jenkins-ci.main:jenkins-core MAVEN version 1.537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.537 - org.jenkins-ci.main:jenkins-war 1.537 -...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (0.3), org.jenkins-ci.main:jenkins-test-harness (1.554.3) +34 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.554.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin 0.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.631), org.jenkins-ci.main:jenkins-war (1.631) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.631)

org.jenkins-ci.main:jenkins-core MAVEN version 1.631 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.631 - org.jenkins-ci.main:jenkins-war 1.631 -...

com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.651.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

org.jenkins-ci.main:jenkins-test-harness (1.636), org.jenkins-ci.main:jenkins-war (1.636) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.636)

org.jenkins-ci.main:jenkins-core MAVEN version 1.636 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.636 - org.jenkins-ci.main:jenkins-war 1.636 -...

de.einsundeins.jenkins.plugins.failedjobdeactivator:failedjobdeactivator (>=1.0, <=1.2.1), de.esailors.jenkins:test-stability (2.3) +8 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.607)

org.jenkins-ci.main:jenkins-core MAVEN version 1.607 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - de.einsundeins.jenkins.plugins.failedjobdeactivator:failedjobdeactivator =1.0, =1.20, =0.12.0,...

com.exxeta.jenkins.plugins:sidebar-update-notification (>=1.0.1, <=1.1.0), jp.shiftinc.jenkins.plugins:discard-old-build (>=1.0.3, <=1.03) +11 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.500)

org.jenkins-ci.main:jenkins-core MAVEN version 1.500 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.exxeta.jenkins.plugins:sidebar-update-notification =1.0.1, =1.0.3, =2.6, =0.0.5, =0.2.0...

org.jenkins-ci.main:jenkins-test-harness (1.489), org.jenkins-ci.main:jenkins-war (1.489) +9 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.489)

org.jenkins-ci.main:jenkins-core MAVEN version 1.489 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.489 - org.jenkins-ci.main:jenkins-war 1.489 -...

org.jenkins-ci.main:jenkins-test-harness (1.547), org.jenkins-ci.main:jenkins-war (1.547) +1 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.547)

org.jenkins-ci.main:jenkins-core MAVEN version 1.547 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.547 - org.jenkins-ci.main:jenkins-war 1.547 -...

org.jenkins-ci.main:jenkins-test-harness (1.540), org.jenkins-ci.main:jenkins-war (1.540) +4 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.540)

org.jenkins-ci.main:jenkins-core MAVEN version 1.540 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.540 - org.jenkins-ci.main:jenkins-war 1.540 -...

org.jenkins-ci.main:jenkins-test-harness (1.569), org.jenkins-ci.main:jenkins-war (1.569) +1 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.569)

org.jenkins-ci.main:jenkins-core MAVEN version 1.569 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.569 - org.jenkins-ci.main:jenkins-war 1.569 -...