73 matches found
CVE-2022-25202
Jenkins Promoted Builds Simple Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Administer permission...
Cross site scripting
Jenkins Promoted Builds Simple Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Administer permission...
CVE-2022-25202
Jenkins Promoted Builds Simple Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Administer permission...
CVE-2022-25202
Jenkins Promoted Builds Simple Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Administer permission...
CVE-2022-25202
CVE-2022-25202 concerns the Jenkins Promoted Builds (Simple) Plugin, versions 1.9 and earlier. The vulnerability arises because the plugin does not escape the name of custom promotion levels, enabling a stored cross-site scripting (XSS) vulnerability. Exploitation requires attacker access with Ov...
PT-2022-17141 · Jenkins · Jenkins Promoted Builds (Simple) Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Promoted Builds Simple Plugin versions 1.9 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not properly escape the name of custom promotion levels. Th...
Jenkins 插件跨站脚本漏洞
Jenkins Plugin is a Jenkins open source application. Jenkins Promoted Builds Simple Plugin is vulnerable to cross-site scripting. An attacker could exploit this vulnerability to cause a stored cross-site scripting attack...
Stored XSS vulnerability in promoted-builds-simple
promoted-builds-simple 1.9 and earlier does not escape the name of custom promotion levels. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Administer permission. As of publication of this advisory, there is no fix. Learn why we announce this...
CVE-2022-25202: Improper Neutralization of Input During Web Page Generation
Jenkins Promoted Builds Simple Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Administer permission...
CloudBees Jenkins Promoted Builds plugin cross-site request forgery vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...
CVE-2021-21641
A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...
CVE-2021-21641
A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...
CVE-2021-21641
A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...
CVE-2021-21641
A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...
CVE-2021-21641
A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...
CVE-2021-21641
A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...
CVE-2021-21641
CVE-2021-21641 : CSRF in the Jenkins promoted builds plugin (v3.9 and earlier) allows attackers to promote builds via endpoints that did not require POST; vulnerability exists in these older plugin versions. The advisory notes that Jenkins promoted builds Plugin 3.9.1+ enforces POST for affected ...
CVE-2021-21641
A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...
Jenkins 跨站请求伪造漏洞
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...
PT-2021-14684 · Jenkins · Jenkins Promoted Builds Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins promoted builds Plugin versions 3.9 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to promote builds. This issue arises because the plugin does not require POST requests for HTTP endpoints...