EUVD-2023-0533

Malicious code in bioql PyPI...

CVE-2023-24447

A cross-site request forgery CSRF vulnerability in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers to connect to an attacker-specified AMQPS URL using attacker-specified username and password...

CVE-2023-24448

A missing permission check in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified AMQPS URL using attacker-specified username and password...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=2.0, <=2.5) potentially affected by CVE-2023-24447 via org.jenkins-ci.plugins:rabbitmq-consumer (>=2.0, <=2.5)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version =2.0, =2.0, =2.5 Source cves: CVE-2023-24447 Source advisory: GHSA-WJ79-9FXJ-J86P...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.6) potentially affected by CVE-2023-24448 via org.jenkins-ci.plugins:rabbitmq-consumer (1.6)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.6 Source cves: CVE-2023-24448...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=2.0, <=2.5) potentially affected by CVE-2023-24447 via org.jenkins-ci.plugins:rabbitmq-consumer (>=2.0, <=2.5)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version =2.0, =2.0, =2.5 Source cves: CVE-2023-24447 Source advisory: OSV:GHSA-WJ79-9FXJ-J86P...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.5) potentially affected by CVE-2023-24447 via org.jenkins-ci.plugins:rabbitmq-consumer (1.5)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.5 Source cves: CVE-2023-24447...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.4) potentially affected by CVE-2023-24448 via org.jenkins-ci.plugins:rabbitmq-consumer (1.4)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.4 Source cves: CVE-2023-24448...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=2.0, <=2.5) potentially affected by CVE-2023-24448 via org.jenkins-ci.plugins:rabbitmq-consumer (>=2.0, <=2.5)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version =2.0, =2.0, =2.5 Source cves: CVE-2023-24448 Source advisory: OSV:GHSA-QGJQ-HRHG-F24H...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.5) potentially affected by CVE-2023-24448 via org.jenkins-ci.plugins:rabbitmq-consumer (1.5)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.5 Source cves: CVE-2023-24448...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.4) potentially affected by CVE-2023-24447 via org.jenkins-ci.plugins:rabbitmq-consumer (1.4)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.4 Source cves: CVE-2023-24447...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.8) potentially affected by CVE-2023-24448 via org.jenkins-ci.plugins:rabbitmq-consumer (1.8)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.8 Source cves: CVE-2023-24448...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=2.0, <=2.5) potentially affected by CVE-2023-24448 via org.jenkins-ci.plugins:rabbitmq-consumer (>=2.0, <=2.5)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version =2.0, =2.0, =2.5 Source cves: CVE-2023-24448 Source advisory: GHSA-QGJQ-HRHG-F24H...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.2) potentially affected by CVE-2023-24448 via org.jenkins-ci.plugins:rabbitmq-consumer (1.2)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.2 Source cves: CVE-2023-24448...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.0) potentially affected by CVE-2023-24447 via org.jenkins-ci.plugins:rabbitmq-consumer (1.0)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.0 Source cves: CVE-2023-24447...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.7) potentially affected by CVE-2023-24448 via org.jenkins-ci.plugins:rabbitmq-consumer (1.7)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.7 Source cves: CVE-2023-24448...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.9) potentially affected by CVE-2023-24447 via org.jenkins-ci.plugins:rabbitmq-consumer (1.9)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.9 Source cves: CVE-2023-24447...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.7) potentially affected by CVE-2023-24447 via org.jenkins-ci.plugins:rabbitmq-consumer (1.7)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.7 Source cves: CVE-2023-24447...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.2) potentially affected by CVE-2023-24447 via org.jenkins-ci.plugins:rabbitmq-consumer (1.2)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.2 Source cves: CVE-2023-24447...

org.jenkins-ci.plugins:rabbitmq-build-trigger (1.9) potentially affected by CVE-2023-24448 via org.jenkins-ci.plugins:rabbitmq-consumer (1.9)

org.jenkins-ci.plugins:rabbitmq-consumer MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:rabbitmq-consumer and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger 1.9 Source cves: CVE-2023-24448...