CVE-2022-34793

CVE-2022-34793 affects Jenkins Recipe Plugin up to version 1.2. The vulnerability arises because the plugin’s XML parser is not configured to prevent XML External Entity (XXE) attacks. Impact details are limited to the XXE risk; no exploit specifics are provided in the connected documents. Remedi...

CVE-2022-34792

CVE-2022-34792 affects Jenkins Recipe Plugin version 1.2 and earlier. The issue is a CSRF vulnerability that lets an attacker cause the Jenkins server to send an HTTP request to a target URL specified by the attacker and then parse the response as XML. This could enable unauthorized actions on be...

CVE-2022-34792

A cross-site request forgery CSRF vulnerability in Jenkins Recipe Plugin 1.2 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML...

PT-2022-22345 · Jenkins · Jenkins Recipe Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Recipe Plugin versions 1.2 and earlier Description: The issue is related to the configuration of the XML parser, which does not prevent XML external entity XXE attacks. This allows for potential exploitation. Recommendations: For...

Jenkins Plugin Recipe 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both open source products from Jenkins.Jenkins is an application. Jenkins is an open source automation server that provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site request forgery...

Jenkins Plugin Recipe 安全漏洞

Jenkins and Jenkins Plugin are both open source products from Jenkins.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An authorization issue vulnerability...

Jenkins Plugin Recipe 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application software. jenkins Recipe Plugin version 1...

CVE-2019-15836

CVE-2019-15836 affects the WordPress plugin wp-ultimate-recipe, with stored XSS in versions before 3.12.7. The vulnerability is introduced in the plugin code and leads to client‑side code execution when exploited. Remediation per available sources is to upgrade to version 3.12.7 or later. Exploit...

WordPress WP Ultimate Recipe plugin <= 3.12.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found in WordPress WP Ultimate Recipe plugin versions = 3.12.6. Solution Update the WordPress WP Ultimate Recipe plugin to the latest available version at least 3.12.7...