403 matches found
aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), org.jenkins-ci.main:jenkins-test-harness (1.520) +24 more potentially affected by CVE-2021-21688 via org.jenkins-ci.main:jenkins-core (1.520)
org.jenkins-ci.main:jenkins-core MAVEN version 1.520 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.4, =1.0.4, =1.0.4, =2.0,...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), org.jenkins-ci.main:jenkins-test-harness (1.520) +24 more potentially affected by CVE-2021-21694 via org.jenkins-ci.main:jenkins-core (1.520)
org.jenkins-ci.main:jenkins-core MAVEN version 1.520 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.4, =1.0.4, =1.0.4, =2.0,...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2021-21696 via org.jenkins-ci.main:jenkins-core (1.625.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...
Stored XSS vulnerability in Jenkins REST List Parameter Plugin
Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Jenkins REST List Parameter Plugin 1.3.1 no longer...
GHSA-X3M6-VCP7-98MR Stored XSS vulnerability in Jenkins REST List Parameter Plugin
Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Jenkins REST List Parameter Plugin 1.3.1 no longer...
GHSA-GC87-QWMV-7X9X Stored XSS vulnerability in Jenkins Artifact Repository Parameter Plugin
Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Jenkins Artifact Repository Parameter Plugin 1.0.1 escapes...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2021-21610 via org.jenkins-ci.main:jenkins-core (1.625.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2021-21607 via org.jenkins-ci.main:jenkins-core (1.625.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2021-21603 via org.jenkins-ci.main:jenkins-core (1.625.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +278 more potentially affected by CVE-2021-21606 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.150.3)
org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2021-21606 Source advisory:...
GHSA-FVWH-WV43-8QJ5 Stored XSS vulnerability in Validating String Parameter Plugin
Validating String Parameter Plugin 2.4 and earlier does not escape regular expressions in tooltips. Additionally, Validating String Parameter Plugin 2.4 does not escape parameter names and parameter descriptions. This results in a stored cross-site scripting XSS vulnerability exploitable by...
Stored XSS vulnerability in Validating String Parameter Plugin
Validating String Parameter Plugin 2.4 and earlier does not escape regular expressions in tooltips. Additionally, Validating String Parameter Plugin 2.4 does not escape parameter names and parameter descriptions. This results in a stored cross-site scripting XSS vulnerability exploitable by...
GHSA-J7Q2-C6R4-X2JW Stored XSS vulnerability in Jenkins Git Parameter Plugin
Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Git Parameter Plugin 0.9.13 escapes the repository field o...
Stored XSS vulnerability in Jenkins Git Parameter Plugin
Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Git Parameter Plugin 0.9.13 escapes the repository field o...
Passwords transmitted in plain text by Jenkins Stash Branch Parameter Plugin
Stash Branch Parameter Plugin stores Stash API passwords in its global configuration file org.jenkinsci.plugins.StashBranchParameter.StashBranchParameterDefinition.xml on the Jenkins controller as part of its configuration. While the password is stored encrypted on disk, it is transmitted in plai...
GHSA-3F82-V3QW-53Q7 Passwords transmitted in plain text by Jenkins Stash Branch Parameter Plugin
Stash Branch Parameter Plugin stores Stash API passwords in its global configuration file org.jenkinsci.plugins.StashBranchParameter.StashBranchParameterDefinition.xml on the Jenkins controller as part of its configuration. While the password is stored encrypted on disk, it is transmitted in plai...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +278 more potentially affected by CVE-2020-2161 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.150.3)
org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2020-2161 Source advisory:...
Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)
Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission...
GHSA-FGXC-MXVW-55MV Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)
Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission...
GHSA-HW26-FW67-QXM9 Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)
Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission...