org.jenkins-ci.main:jenkins-test-harness (1.597), org.jenkins-ci.main:jenkins-war (1.597) +4 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.597)

org.jenkins-ci.main:jenkins-core MAVEN version 1.597 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.597 - org.jenkins-ci.main:jenkins-war 1.597 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.597), org.jenkins-ci.main:jenkins-war (1.597) +4 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.597)

org.jenkins-ci.main:jenkins-core MAVEN version 1.597 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.597 - org.jenkins-ci.main:jenkins-war 1.597 -...

org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.598)

org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...

org.jenkins-ci.main:jenkins-test-harness (1.597), org.jenkins-ci.main:jenkins-war (1.597) +4 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.597)

org.jenkins-ci.main:jenkins-core MAVEN version 1.597 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.597 - org.jenkins-ci.main:jenkins-war 1.597 -...

io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.626)

org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2018-1999007...

org.jenkins-ci.main:jenkins-test-harness (1.597), org.jenkins-ci.main:jenkins-war (1.597) +4 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.597)

org.jenkins-ci.main:jenkins-core MAVEN version 1.597 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.597 - org.jenkins-ci.main:jenkins-war 1.597 -...

org.jenkins-ci.main:jenkins-test-harness (1.597), org.jenkins-ci.main:jenkins-war (1.597) +4 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.597)

org.jenkins-ci.main:jenkins-core MAVEN version 1.597 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.597 - org.jenkins-ci.main:jenkins-war 1.597 -...

org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.598)

org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...

CSRF vulnerability and missing permission check in relution-publisher allow SSRF

A missing permission check in a form validation method in relution-publisher allows users with Overall/Read permission to initiate a connection test to an attacker-specified URL using attacker-specified credentials and attacker-specified HTTP proxy configuration. Additionally, the form validation...

relution-publisher stores credentials in plain text

relution-publisher stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.relutionpublisher.configuration.global.StoreConfiguration.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...