134 matches found
CVE-2022-41248
Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the potential for attackers to observe and capture it...
CVE-2022-34805
Jenkins Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
CVE-2022-28138
A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...
com.cisco.step.jenkins.plugins:jenkow-parent (0.1), org.jenkins-ci.main:jenkins-test-harness (1.455) +9 more potentially affected by CVE-2025-31720 via org.jenkins-ci.main:jenkins-core (1.455)
org.jenkins-ci.main:jenkins-core MAVEN version 1.455 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:jenkow-parent 0.1 - org.jenkins-ci.main:jenkins-test-harness 1.4...
com.cisco.step.jenkins.plugins:jenkow-parent (0.1), org.jenkins-ci.main:jenkins-test-harness (1.455) +9 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.455)
org.jenkins-ci.main:jenkins-core MAVEN version 1.455 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:jenkow-parent 0.1 - org.jenkins-ci.main:jenkins-test-harness 1.4...
CVE-2024-8730
CVE-2024-8730 concerns the Exit Notifier plugin for WordPress. A Reflected Cross-Site Scripting vulnerability exists in all versions up to and including 1.9.1 due to improper escaping of URLs when using add_query_arg, enabling unauthenticated attackers to inject script into pages that run when a ...
CVE-2024-28154
Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default...
CVE-2024-28154
Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default...
CVE-2024-28154
CVE-2024-28154 affects the Jenkins MQ Notifier Plugin (versions 1.4.0 and earlier). The issue is an information disclosure vulnerability where debug logging may record sensitive build parameters in build logs by default. This logging behavior can expose confidential data to users with access to b...
CVE-2024-28154
Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default...
CVE-2024-28154
Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default...
CVE-2024-28154
Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default...
CVE-2024-28154: Insertion of Sensitive Information into Log File
Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default...
Jenkins MQ Notifier Plugin Security Vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
Jenkins Cisco Spark Notifier Plugin Access Control
The vulnerability of the Jenkins Cisco Spark Notifier Plugin is related to deficiencies in access control when processing HTTP endpoints. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
com.cisco.step.jenkins.plugins:jenkow-parent (0.1), org.jenkins-ci.main:jenkins-test-harness (1.455) +9 more potentially affected by CVE-2023-27903 via org.jenkins-ci.main:jenkins-core (1.455)
org.jenkins-ci.main:jenkins-core MAVEN version 1.455 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:jenkow-parent 0.1 - org.jenkins-ci.main:jenkins-test-harness 1.4...
com.cisco.step.jenkins.plugins:jenkow-parent (0.1), org.jenkins-ci.main:jenkins-test-harness (1.455) +9 more potentially affected by CVE-2023-27901 via org.jenkins-ci.main:jenkins-core (1.455)
org.jenkins-ci.main:jenkins-core MAVEN version 1.455 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:jenkow-parent 0.1 - org.jenkins-ci.main:jenkins-test-harness 1.4...
CVE-2023-24451
A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
Information disclosure
A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...