org.jenkins-ci.main:jenkins-test-harness (1.540), org.jenkins-ci.main:jenkins-war (1.540) +4 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.540)

org.jenkins-ci.main:jenkins-core MAVEN version 1.540 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.540 - org.jenkins-ci.main:jenkins-war 1.540 -...

com.joelj.jenkins:ez-templates (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.574) +6 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.574)

org.jenkins-ci.main:jenkins-core MAVEN version 1.574 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.joelj.jenkins:ez-templates 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.574 -...

org.jenkins-ci.main:jenkins-test-harness (1.604), org.jenkins-ci.main:jenkins-war (1.604) +1 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.604)

org.jenkins-ci.main:jenkins-core MAVEN version 1.604 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.604 - org.jenkins-ci.main:jenkins-war 1.604 -...

com.exxeta.jenkins.plugins:sidebar-update-notification (>=1.0.1, <=1.1.0), jp.shiftinc.jenkins.plugins:discard-old-build (>=1.0.3, <=1.03) +11 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.500)

org.jenkins-ci.main:jenkins-core MAVEN version 1.500 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.exxeta.jenkins.plugins:sidebar-update-notification =1.0.1, =1.0.3, =2.6, =0.0.5, =0.2.0...

de.einsundeins.jenkins.plugins.failedjobdeactivator:failedjobdeactivator (>=1.0, <=1.2.1), de.esailors.jenkins:test-stability (2.3) +8 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.607)

org.jenkins-ci.main:jenkins-core MAVEN version 1.607 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - de.einsundeins.jenkins.plugins.failedjobdeactivator:failedjobdeactivator =1.0, =1.20, =0.12.0,...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

com.parallels:parallels-desktop (>=0.4, <=0.6), org.fedoraproject.jenkins.plugins:copr (0.6.1) +7 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.651.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.parallels:parallels-desktop =0.4, =1.6, =0.7.0, =0.8.1 Source cves: CVE-2023-35141 Source...

org.jenkins-ci.main:jenkins-test-harness (1.636), org.jenkins-ci.main:jenkins-war (1.636) +1 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.636)

org.jenkins-ci.main:jenkins-core MAVEN version 1.636 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.636 - org.jenkins-ci.main:jenkins-war 1.636 -...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

com.amazonaws:aws-codepipeline (>=0.9, <=0.45), com.tinfoilsecurity.plugins:tinfoil-scan (1.4) +5 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.479)

org.jenkins-ci.main:jenkins-core MAVEN version 1.479 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:aws-codepipeline =0.9, =0.45 - com.tinfoilsecurity.plugins:tinfoil-scan 1.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.489), org.jenkins-ci.main:jenkins-war (1.489) +9 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.489)

org.jenkins-ci.main:jenkins-core MAVEN version 1.489 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.489 - org.jenkins-ci.main:jenkins-war 1.489 -...

org.jenkins-ci.main:jenkins-test-harness (1.558), org.jenkins-ci.main:jenkins-war (1.558) +1 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.558)

org.jenkins-ci.main:jenkins-core MAVEN version 1.558 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.558 - org.jenkins-ci.main:jenkins-war 1.558 -...

Oracle Patch Tuesday April 2023 Security Update Review

Oracle has released the second quarterly edition of Critical Patch Update, which contains a group of patches for 433 security vulnerabilities. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and third-party components...

Improper masking of credentials in multiple plugins

Multiple plugins do not properly mask i.e., replace with asterisks credentials printed in the build log from Pipeline steps like sh and bat, when both of the following conditions are met: The credentials are printed in build steps executing on an agent typically inside a node block. Push mode for...

Jenkins Plugins Convert To Pipeline: Command Injection Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Jenkins Plugins Performance Publisher code-related vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Jenkins Plugins OctoPerf Load Testing security vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

org.jenkins-ci.main:jenkins-test-harness (1.589), org.jenkins-ci.main:jenkins-war (1.589) +1 more potentially affected by CVE-2023-27901 via org.jenkins-ci.main:jenkins-core (1.589)

org.jenkins-ci.main:jenkins-core MAVEN version 1.589 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.589 - org.jenkins-ci.main:jenkins-war 1.589 -...

com.blazemeter.plugins:blazemeterjenkinsplugin (>=2.0, <=2.6), jenkins.plugins.elanceodesk:workplace-notifier (>=1.14, <=1.16) +7 more potentially affected by CVE-2023-27901 via org.jenkins-ci.main:jenkins-core (1.576)

org.jenkins-ci.main:jenkins-core MAVEN version 1.576 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =2.0, =1.14, =1.14, =1.5, =1.6 Source cves:...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2023-27901 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...