com.mobileenerlytics.eagle.tester:eagle-tester (>=1.0.6, <=1.0.9), hudson.plugins.signal_killer:signal-killer (1.1) +12 more potentially affected by CVE-2023-43497 via org.jenkins-ci.main:jenkins-core (>=2.50, <=2.386)

org.jenkins-ci.main:jenkins-core MAVEN version =2.50, =1.0.6, =4.6.0.23, =2.50, =2.50, =2.0, =1.0, =0.2, =3.0, =0.2.6, =1.0-alpha-2, =0.13, =1201.vb4f0bb63dd3b, =1212.vde346b7adc40 Source cves: CVE-2023-43497 Source advisory: MEND:CVE-2023-43497...

com.mobileenerlytics.eagle.tester:eagle-tester (>=1.0.6, <=1.0.9), hudson.plugins.signal_killer:signal-killer (1.1) +12 more potentially affected by CVE-2023-43494 via org.jenkins-ci.main:jenkins-core (>=2.50, <=2.386)

org.jenkins-ci.main:jenkins-core MAVEN version =2.50, =1.0.6, =4.6.0.23, =2.50, =2.50, =2.0, =1.0, =0.2, =3.0, =0.2.6, =1.0-alpha-2, =0.13, =1201.vb4f0bb63dd3b, =1212.vde346b7adc40 Source cves: CVE-2023-43494 Source advisory: MEND:CVE-2023-43494...

Vulnerabilities fixed in Jenkins (core) and plugins

Vulnerabilities have been fixed in Jenkins and some plugins, such as Bazaar, GitLab Authentication and Gradle. A malicious person could exploit the vulnerabilities to perform a Cross-Site-Scripting attack XSS, or a Cross-Site-Request-Forgery CSRF. Such an attack can lead to execution of arbitrary...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (0.3), org.jenkins-ci.main:jenkins-test-harness (1.554.3) +34 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.554.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin 0.3 -...

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.536)

org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.537), org.jenkins-ci.main:jenkins-war (1.537) +2 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.537)

org.jenkins-ci.main:jenkins-core MAVEN version 1.537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.537 - org.jenkins-ci.main:jenkins-war 1.537 -...

org.jenkins-ci.main:jenkins-test-harness (1.578), org.jenkins-ci.main:jenkins-war (1.578) +2 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.578)

org.jenkins-ci.main:jenkins-core MAVEN version 1.578 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.578 - org.jenkins-ci.main:jenkins-war 1.578 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.558), org.jenkins-ci.main:jenkins-war (1.558) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.558)

org.jenkins-ci.main:jenkins-core MAVEN version 1.558 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.558 - org.jenkins-ci.main:jenkins-war 1.558 -...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.651.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

org.jenkins-ci.main:jenkins-test-harness (1.552), org.jenkins-ci.main:jenkins-war (1.552) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.552)

org.jenkins-ci.main:jenkins-core MAVEN version 1.552 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.552 - org.jenkins-ci.main:jenkins-war 1.552 -...

org.jenkins-ci.main:jenkins-test-harness (1.636), org.jenkins-ci.main:jenkins-war (1.636) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.636)

org.jenkins-ci.main:jenkins-core MAVEN version 1.636 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.636 - org.jenkins-ci.main:jenkins-war 1.636 -...

org.jenkins-ci.main:jenkins-test-harness (1.630), org.jenkins-ci.main:jenkins-war (1.630) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.630)

org.jenkins-ci.main:jenkins-core MAVEN version 1.630 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.630 - org.jenkins-ci.main:jenkins-war 1.630 -...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

org.jenkins-ci.main:jenkins-test-harness (1.631), org.jenkins-ci.main:jenkins-war (1.631) +1 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.631)

org.jenkins-ci.main:jenkins-core MAVEN version 1.631 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.631 - org.jenkins-ci.main:jenkins-war 1.631 -...

com.amazonaws:aws-codepipeline (>=0.9, <=0.45), com.tinfoilsecurity.plugins:tinfoil-scan (1.4) +5 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.479)

org.jenkins-ci.main:jenkins-core MAVEN version 1.479 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:aws-codepipeline =0.9, =0.45 - com.tinfoilsecurity.plugins:tinfoil-scan 1.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.489), org.jenkins-ci.main:jenkins-war (1.489) +9 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.489)

org.jenkins-ci.main:jenkins-core MAVEN version 1.489 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.489 - org.jenkins-ci.main:jenkins-war 1.489 -...

org.jenkins-ci.main:jenkins-test-harness (1.547), org.jenkins-ci.main:jenkins-war (1.547) +1 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.547)

org.jenkins-ci.main:jenkins-core MAVEN version 1.547 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.547 - org.jenkins-ci.main:jenkins-war 1.547 -...