PT-2022-17141 · Jenkins · Jenkins Promoted Builds (Simple) Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Promoted Builds Simple Plugin versions 1.9 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not properly escape the name of custom promotion levels. Th...

CloudBees Jenkins Promoted Builds plugin cross-site request forgery vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

CVE-2021-21641

A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...

CVE-2021-21641

A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...

CVE-2021-21641

A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...

CVE-2021-21641

A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...

CVE-2021-21641

A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...

CVE-2021-21641

CVE-2021-21641 : CSRF in the Jenkins promoted builds plugin (v3.9 and earlier) allows attackers to promote builds via endpoints that did not require POST; vulnerability exists in these older plugin versions. The advisory notes that Jenkins promoted builds Plugin 3.9.1+ enforces POST for affected ...

CVE-2021-21641

A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...

Jenkins 跨站请求伪造漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

CSRF vulnerability in promoted-builds

promoted-builds 3.9 and earlier does not require POST requests for HTTP endpoints implementing promotion regular, forced, and re-execute, resulting in cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow attackers to promote builds. promoted-builds 3.9.1 requires POST...

PT-2021-14684 · Jenkins · Jenkins Promoted Builds Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins promoted builds Plugin versions 3.9 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to promote builds. This issue arises because the plugin does not require POST requests for HTTP endpoints...

Jenkins Promoted Builds Plugin Security Bypass Vulnerability

Jenkins is an open source software project , is based on Java development of a continuous integration tool . A security vulnerability exists in the Status.java and ManualCondition.java files in Jenkins Promoted Builds Plugin 2.31.1 and earlier versions, which stems from a program that makes it...

Authorization

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

CVE-2018-1000114

CVE-2018-1000114 affects Jenkins Promoted Builds Plugin 2.31.1 and earlier. The vulnerability arises from improper authorization in Status.java and ManualCondition.java, enabling an attacker who has read access to jobs to perform promotions. Supported by multiple feeds (GHSA, OSV, CNVD, Red Hat, ...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...