org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-8, <=1.0), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-8, <=1.0) +2 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.9)

org.jenkins-ci.plugins:script-security MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-8, =0.1-beta-8,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=1.1, <=1.2), org.jenkins-ci.plugins.workflow:workflow-cps (>=1.1, <=1.2) +1 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.12)

org.jenkins-ci.plugins:script-security MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =1.1, =1.1, =1.1, =1.2 Source...

jp.ikedam.jenkins.plugins:extensible-choice-parameter (>=1.4.0, <=1.8.0), org.jenkins-ci.plugins:extended-choice-parameter (0.65) +4 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.18.1)

org.jenkins-ci.plugins:script-security MAVEN version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - jp.ikedam.jenkins.plugins:extensible-choice-parameter =1.4.0, =1.2.3, =1.3.4, =1.9...

com.geteasyqa:easyqa (1.0), com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6) +15 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.27)

org.jenkins-ci.plugins:script-security MAVEN version 1.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.geteasyqa:easyqa 1.0 - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.5.0, =1.5.0,...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +94 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.13)

org.jenkins-ci.plugins:script-security MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.6 -...

org.biouno:uno-choice (1.5-alpha-1), org.jenkins-ci.plugins:ansible-tower (>=0.5.0, <=0.12.0) +7 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.17)

org.jenkins-ci.plugins:script-security MAVEN version 1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice 1.5-alpha-1 - org.jenkins-ci.plugins:ansible-tower =0.5.0, =1....

CVE-2022-30946

A cross-site request forgery CSRF vulnerability in Jenkins Script Security Plugin 1158.v7c1b73a69a08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver...

CVE-2022-30946

A cross-site request forgery CSRF vulnerability in Jenkins Script Security Plugin 1158.v7c1b73a69a08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver...

CVE-2022-30946

A cross-site request forgery CSRF vulnerability in Jenkins Script Security Plugin 1158.v7c1b73a69a08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Script Security Plugin 1158.v7c1b73a69a08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver...

CVE-2022-30946

CVE-2022-30946 is a CSRF vulnerability in Jenkins Script Security Plugin (affecting versions up to 1158.v7c1b_73a_69a_08 and earlier). An authenticated attacker can induce Jenkins to send an HTTP request to a attacker‑specified webserver, enabling malicious activity such as cross‑site scripting a...

CVE-2022-30946

A cross-site request forgery CSRF vulnerability in Jenkins Script Security Plugin 1158.v7c1b73a69a08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver...

CVE-2022-30946

A cross-site request forgery CSRF vulnerability in Jenkins Script Security Plugin 1158.v7c1b73a69a08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver...

CVE-2022-30946

A cross-site request forgery CSRF vulnerability in Jenkins Script Security Plugin 1158.v7c1b73a69a08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver...

Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs 1 direct field access or 2 get/set array operations...

GHSA-XGJX-96V4-MQXX Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs 1 direct field access or 2 get/set array operations...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +171 more potentially affected by CVE-2016-3102 via org.jenkins-ci.plugins:script-security (>=1.4, <=1.18)

org.jenkins-ci.plugins:script-security MAVEN version =1.4, =1.0.5.0, =1.9.2-beta, =1.29, =1.28.0, =2.37.0, =1.7.2, =1.4.2, =1.2.5, =1.0, =1.0.14, =1.0, =1.28, =1.0, =1.4.3 and more Source cves: CVE-2016-3102 Source advisory: OSV:GHSA-XGJX-96V4-MQXX...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +171 more potentially affected by CVE-2016-3102 via org.jenkins-ci.plugins:script-security (>=1.4, <=1.18)

org.jenkins-ci.plugins:script-security MAVEN version =1.4, =1.0.5.0, =1.9.2-beta, =1.29, =1.28.0, =2.37.0, =1.7.2, =1.4.2, =1.2.5, =1.0, =1.0.14, =1.0, =1.28, =1.0, =1.4.3 and more Source cves: CVE-2016-3102 Source advisory: GHSA-XGJX-96V4-MQXX...

Jenkins Script Security Plugin Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Script Security Plugin...

CVE-2022-30946: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Script Security Plugin 1158.v7c1b73a69a08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver...