Lucene search
+L

31 matches found

Cvelist
Cvelist
added 2022/09/21 3:45 p.m.32 views

CVE-2022-41229

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.7AI score0.00486EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/09/21 3:45 p.m.8 views

CVE-2022-41229

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4AI score0.00486EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/21 3:45 p.m.81 views

CVE-2022-41228

CVE-2022-41228 : Jenkins NS-ND Integration Performance Publisher Plugin, versions up to and including 4.8.0.129, contains a missing permission check that allows attackers with Overall/Read to connect to an attacker-specified webserver using attacker-specified credentials. The issue is confirmed b...

8.8CVSS8.4AI score0.00858EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/21 3:45 p.m.26 views

CVE-2022-41227

A cross-site request forgery CSRF vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials...

8.9AI score0.00479EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2022/09/21 3:45 p.m.33 views

CVE-2022-41227

A cross-site request forgery CSRF vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials...

8.8CVSS4.9AI score0.00479EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/21 3:45 p.m.102 views

CVE-2022-41227

CVE-2022-41227 : Jenkins NS-ND Integration Performance Publisher Plugin, versions 4.8.0.129 and earlier, is affected by a cross-site request forgery (CSRF) vulnerability that allows attackers to connect to an attacker-specified webserver using attacker-specified credentials. The CVSS v3.1 base sc...

8.8CVSS8.6AI score0.00479EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/21 12:0 a.m.5 views

PT-2022-25744 · Jenkins · Jenkins Ns-Nd Integration Performance Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.134 and earlier Description: The issue results from the plugin not escaping configuration options of the Execute NetStorm/NetCloud Test build step, leading to a stored...

8CVSS5.2AI score0.00486EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2022/09/21 12:0 a.m.7 views

Jenkins NS-ND Integration Performance Publisher Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

8.8CVSS7.9AI score0.00858EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/09/21 12:0 a.m.7 views

Jenkins NS-ND Integration Performance Publisher Plugin 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site scripting...

5.4CVSS5.5AI score0.00486EPSS
SaveExploits0References3
OSV
OSV
added 2022/06/24 12:0 a.m.38 views

GHSA-PV38-MQPP-V72H Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of th...

8CVSS5.7AI score0.00606EPSS
SaveExploits0References5
CVE
CVE
added 2022/06/22 2:41 p.m.103 views

CVE-2022-34191

CVE-2022-34191 refers to a stored XSS vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin, affecting version 4.8.0.77 and earlier. The issue arises because the plugin does not escape the name of NetStorm Test parameters on views that display parameters, enabling an attacker wi...

5.4CVSS5.2AI score0.00606EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder