EUVD-2022-5484

Malicious code in bioql PyPI...

CVE-2023-41930

CVE-2023-41930 affects Jenkins via the Job Configuration History Plugin (versions up to 1227.v7a_79fc4dc01f and earlier). The vulnerability arises because the plugin does not restrict the name query parameter when rendering a history entry, enabling an attacker to have Jenkins render a manipulate...

CloudBees Jenkins Job Config History Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based continuous integration tools , which is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Job Config History Plugin is used in one of the plug-in to save a copy...

CVE-2018-1000416

The CVE-2018-1000416 entry concerns Jenkins Job Config History Plugin (versions up to 2.18) with a reflected cross-site scripting (XSS) flaw in all Jelly files that allows an attacker to inject arbitrary HTML into Jenkins output shown to users who have Job/Configure access. This is a client-side ...