CVE-2022-34192: Improper Neutralization of Input During Web Page Generation

Jenkins ontrack Jenkins Plugin 4.0.0 and earlier does not escape the name of Ontrack: Multi Parameter choice, Ontrack: Parameter choice, and Ontrack: SingleParameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers wi...

Jenkins Plugin Convertigo Mobile Platform Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site request forgery vulnerability...

Jenkins Plugin EasyQA has a security vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins EasyQA Plugin 1.0 and prior...

Jenkins Plugin EasyQA: Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. Jenkins EasyQA Plugin 1.0 and earlier versions are vulnerable to cross-site...

Jenkins Plugin Convertigo Mobile Platform Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. The vulnerability stems from a failure to perform permission checks in the...

PT-2022-22048 · Jenkins · Jenkins Embeddable Build Status Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Embeddable Build Status Plugin versions 2.0.3 and earlier Description: The issue concerns the incorrect performance of the ViewStatus permission check in the HTTP endpoint provided for "unprotected" status badge access. This allows...

Jenkins Plugin Squash TM Publisher has security vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Squash TM Publisher Plugin 1.0.0...

Jenkins Plugin Jianliao Notification Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. An attacker with overall/read permissions could exploit this vulnerability to...

Jenkins Plugin: Maven Metadata for CI Server – Cross-Site Scripting Vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. a cross-site scripting vulnerability exists in Jenkins Maven Metadata for CI...

Jenkins Plugin REST List Parameter Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is an application software. A cross-site scripting...

Jenkins Plugin vRealize Orchestrator Cross-site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins vRealize Orchestrator Plugin 3.0...

PT-2022-22052 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins CRX Content Package Deployer Plugin versions 1.9 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the plugin does not escape the name and description of CRX Content Package Choi...

Jenkins Plugin Repository Connector Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

PT-2022-22075 · Jenkins · Jenkins Jianliao Notification Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Jianliao Notification Plugin versions 1.1 and earlier Description: A cross-site request forgery CSRF issue allows attackers to send HTTP POST requests to an attacker-specified URL. This can be exploited by attackers to perform...

PT-2022-22054 · Jenkins · Jenkins Dynamic Extended Choice Parameter Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dynamic Extended Choice Parameter Plugin versions 1.0.1 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the plugin does not escape the name and description of Moded Extended...

PT-2022-22060 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.77 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not escape the name of NetStorm Test...

org.jenkins-ci.main:jenkins-test-harness (1.589), org.jenkins-ci.main:jenkins-war (1.589) +1 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.589)

org.jenkins-ci.main:jenkins-core MAVEN version 1.589 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.589 - org.jenkins-ci.main:jenkins-war 1.589 -...

org.cloudsmith.hammer.jenkins:stackhammer (1.0.0), org.jenkins-ci.main:jenkins-test-harness (1.467) +5 more potentially affected by CVE-2019-10405 via org.jenkins-ci.main:jenkins-core (1.467)

org.jenkins-ci.main:jenkins-core MAVEN version 1.467 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.cloudsmith.hammer.jenkins:stackhammer 1.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.46...

com.castlemon.hudson:cucumber-perf (>=1.1, <=2.0.6), org.jenkins-ci.main:jenkins-test-harness (1.519) +5 more potentially affected by CVE-2019-10404 via org.jenkins-ci.main:jenkins-core (1.519)

org.jenkins-ci.main:jenkins-core MAVEN version 1.519 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.castlemon.hudson:cucumber-perf =1.1, =1.3.4, =1.3.5 - org.jenkins-ci.plugins:plugin 1.519...

com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), org.jenkins-ci.main:jenkins-test-harness (1.503) +5 more potentially affected by CVE-2019-10401 via org.jenkins-ci.main:jenkins-core (1.503)

org.jenkins-ci.main:jenkins-core MAVEN version 1.503 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =1.15, =1.17 - org.jenkins-ci.plugins:plugin...