1838 matches found
org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.446)
org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...
Jenkins RocketChat Notifier Plugin Licensing Issue Vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins RocketChat Notifier Plugin 1.4.10 and earlier versions are vulnerable...
Jenkins RocketChat Notifier Plugin跨站请求伪造漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins RocketChat Notifier Plugin 1.4.10...
GHSA-X25H-F84X-WH4M CSRF vulnerability in Jenkins RocketChat Notifier Plugin
Jenkins RocketChat Notifier Plugin 1.4.10 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credential. Additionally, this form validation...
Missing permission check in Jenkins RocketChat Notifier Plugin
Jenkins RocketChat Notifier Plugin 1.4.10 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials. Additionally, this form validation...
CSRF vulnerability in Jenkins RocketChat Notifier Plugin
Jenkins RocketChat Notifier Plugin 1.4.10 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credential. Additionally, this form validation...
org.jenkins-ci.plugins:mypeople (>=0.3, <=0.3.0.3), org.jenkins-ci.plugins:skype-notifier (>=1.0, <=1.1.0) +2 more potentially affected by CVE-2022-28135 via org.jvnet.hudson.plugins:instant-messaging (>=1.0, <=1.38)
org.jvnet.hudson.plugins:instant-messaging MAVEN version =1.0, =0.3, =1.0, =2.0, =unspecified, =1.41 Source cves: CVE-2022-28135 Source advisory: OSV:GHSA-HPM9-FX8V-W45V...
org.jenkins-ci.plugins:mypeople (>=0.3, <=0.3.0.3), org.jenkins-ci.plugins:skype-notifier (>=1.0, <=1.1.0) +2 more potentially affected by CVE-2022-28135 via org.jvnet.hudson.plugins:instant-messaging (>=1.0, <=1.38)
org.jvnet.hudson.plugins:instant-messaging MAVEN version =1.0, =0.3, =1.0, =2.0, =unspecified, =1.41 Source cves: CVE-2022-28135 Source advisory: GHSA-HPM9-FX8V-W45V...
CVE-2022-28139
A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...
CVE-2022-28138
A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...
CVE-2022-28139
A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...
CVE-2022-28138
A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...
CVE-2022-28138
A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...
CVE-2022-28139
A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...
Cross site request forgery (csrf)
A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...
CVE-2022-28139
CVE-2022-28139 affects Jenkins RocketChat Notifier Plugin 1.4.10 and earlier. A missing permission check in a form-validation path allows attackers with Overall/Read to connect to an attacker-specified URL using attacker-specified credentials (potential CSRF in related endpoints). Affected versio...
CVE-2022-28139
A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...
CVE-2022-28138
CVE-2022-28138 is a CSRF flaw in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier that allows an attacker with no special privileges to cause the controller to connect to a URL of the attacker’s choosing using attacker‑supplied credentials. The linked sources confirm the affected component (...
CVE-2022-28138
A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...