CVE-2022-34784

Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Build/Update permission...

CVE-2022-34784

Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Build/Update permission...

CVE-2022-34785

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them...

CVE-2022-34785

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them...

Cross site scripting

Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Build/Update permission...

Design/Logic Flaw

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them...

CVE-2022-34785

CVE-2022-34785 affects the Jenkins build-metrics Plugin (version 1.3 and earlier). The issue is that the plugin does not perform permission checks on multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs they would normally not have access to. P...

CVE-2022-34785

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them...

CVE-2022-34784

CVE-2022-34784 refers to Jenkins build-metrics Plugin 1.3, where the build description is not escaped on a view, causing a stored XSS vulnerability. The issue is exploitable by attackers with Build/Update permission. Multiple connected sources (NVD, Red Hat CVE, OSV, CNVD, GHSA, etc.) consistentl...

CVE-2022-34784

Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Build/Update permission...

PT-2022-22336 · Jenkins · Jenkins Build-Metrics Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins build-metrics Plugin versions 1.3 and earlier Description: The issue concerns the Jenkins build-metrics Plugin, which does not perform permission checks in multiple HTTP endpoints. This allows attackers with Overall/Read permission to...

Jenkins Plugin build-metrics 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins build-metrics Plugin version 1.3 and earlier versions are vulnerable t...

PT-2022-22335 · Jenkins · Jenkins Build-Metrics Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins build-metrics Plugin version 1.3 Description: The issue is a stored cross-site scripting XSS vulnerability. It occurs because the build description on one of the views is not properly escaped, allowing attackers with Build/Update...

Jenkins Plugin build-metrics 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. Jenkins build-metrics Plugin version 1.3 contains a cross-site scripting...

GSD-2022-1002581 drm/amd/pm: fix a potential gpu_metrics_table memory leak

drm/amd/pm: fix a potential gpumetricstable memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17 by commit...

Malicious Package

Overview coil-metrics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in clusterman-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030f2f80ded1b9dbab29658e5342d38fe8661034d904ba8e7c5fc95a0cf90404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1945 Malicious code in clusterman-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030f2f80ded1b9dbab29658e5342d38fe8661034d904ba8e7c5fc95a0cf90404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @amp-metrics/mt-metricskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc1a6d0bd9e4b7b4550c88d71ee7fbf5710733f5d34a7e91a0625ae7f4ebf7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-74 Malicious code in @amp-metrics/mt-metricskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc1a6d0bd9e4b7b4550c88d71ee7fbf5710733f5d34a7e91a0625ae7f4ebf7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...