org.jenkins-ci.plugins:ontrack (>=2.32.0, <=2.32.5) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.28)

org.jenkins-ci.plugins:script-security MAVEN version 1.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:ontrack =2.32.0, =2.32.5 Source cves: CVE-2024-52549 Source...

org.jvnet.hudson.plugins:groovy-postbuild (>=2.0, <=2.2.2) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.5)

org.jenkins-ci.plugins:script-security MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jvnet.hudson.plugins:groovy-postbuild =2.0, =2.2.2 Source cves: CVE-2024-52549...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-8, <=1.0), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-8, <=1.0) +2 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.9)

org.jenkins-ci.plugins:script-security MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-8, =0.1-beta-8,...

org.jenkins-ci.plugins:claim (543.v0061de6b_dcb_d) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1264.vecf66020eb_7d)

org.jenkins-ci.plugins:script-security MAVEN version 1264.vecf66020eb7d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:claim 543.v0061de6bdcbd Source cves:...

Missing permission check in Jenkins Script Security Plugin

Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va3bb89f8a95b and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the...

com.testinium.jenkins:testinium (1.0), me.vickychijwani.jenkins:labelled-steps (1.0) +29 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.25)

org.jenkins-ci.plugins:script-security MAVEN version 1.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.testinium.jenkins:testinium 1.0 - me.vickychijwani.jenkins:labelled-steps 1.0 -...

io.jenkins.plugins:pipeline-agent-build-history (>=44.va_44d94c22f21, <=90.vf089ff0feff9), io.jenkins.plugins:pipeline-groovy-lib (>=727.ve832a_9244dfa, <=745.vdf6077913de0) +4 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1326.vdb_c154de8669)

org.jenkins-ci.plugins:script-security MAVEN version 1326.vdbc154de8669 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history =44.va44d94c22f21,...

GHSA-JV82-75FH-23R7 Missing permission check in Jenkins Script Security Plugin

Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va3bb89f8a95b and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the...

org.jenkins-ci.plugins:embeddable-build-status (>=2.0-beta1, <=2.0.4) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.49)

org.jenkins-ci.plugins:script-security MAVEN version 1.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:embeddable-build-status =2.0-beta1, =2.0.4 Source cves:...

jp.ikedam.jenkins.plugins:extensible-choice-parameter (>=1.4.0, <=1.8.0), org.jenkins-ci.plugins:extended-choice-parameter (0.65) +4 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.18.1)

org.jenkins-ci.plugins:script-security MAVEN version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - jp.ikedam.jenkins.plugins:extensible-choice-parameter =1.4.0, =1.2.3, =1.3.4, =1.9...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-1, <=0.1-beta-4) +1 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.4)

org.jenkins-ci.plugins:script-security MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1,...

org.jenkins-ci.plugins:templating-engine (>=2.2, <=2.5.3) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.76)

org.jenkins-ci.plugins:script-security MAVEN version 1.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.2, =2.5.3 Source cves: CVE-2024-52549...

de.tracetronic.jenkins.plugins:ecu-test-execution (>=3.0, <=3.4), jp.ikedam.jenkins.plugins:extensible-choice-parameter (1.8.1) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1158.v7c1b_73a_69a_08)

org.jenkins-ci.plugins:script-security MAVEN version 1158.v7c1b73a69a08 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.tracetronic.jenkins.plugins:ecu-test-execution =3.0, =3.4 -...

org.biouno:uno-choice (1.5-alpha-1), org.jenkins-ci.plugins:ansible-tower (>=0.5.0, <=0.12.0) +7 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.17)

org.jenkins-ci.plugins:script-security MAVEN version 1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice 1.5-alpha-1 - org.jenkins-ci.plugins:ansible-tower =0.5.0, =1....

org.jenkins-ci.plugins:cas-plugin (1.7.0), org.jenkins-ci.plugins:parallel-test-executor (500.va_5e1c1f1a_211) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1358.vb_26663c13537)

org.jenkins-ci.plugins:script-security MAVEN version 1358.vb26663c13537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:cas-plugin 1.7.0 -...

org.jenkins-ci.plugins:gradle (2.12.0.1) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1138.v8e727069a_025)

org.jenkins-ci.plugins:script-security MAVEN version 1138.v8e727069a025 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:gradle 2.12.0.1 Source cves: CVE-2024-52549...

io.jenkins.plugins:coverage-badges-extension (>=-rc6.886d29ff0f4d, <=47.v41e62ecf0928), jp.ikedam.jenkins.plugins:scoring-load-balancer (>=68.va_4591100d6a_b, <=97.v8e470ff53e15) +9 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1294.v99333c047434)

org.jenkins-ci.plugins:script-security MAVEN version 1294.v99333c047434 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:coverage-badges-extension =-rc6.886d29ff0f4d,...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +94 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.13)

org.jenkins-ci.plugins:script-security MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.6 -...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), com.mig82:folder-properties (>=1.0, <=1.2.1) +14 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.18)

org.jenkins-ci.plugins:script-security MAVEN version 1.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta, =1.0, =0.0.8, =1.0-alpha-1, =1.0-alpha-...

io.jenkins.plugins:cdevents (>=1-37.v6412b_91c3799, <=1-40.vb_3d2c94f2379), io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=34.v570d1a_452f30) +4 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1273.v66c1964f0dfd)

org.jenkins-ci.plugins:script-security MAVEN version 1273.v66c1964f0dfd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:cdevents =1-37.v6412b91c3799, =20.v2cb6cc0a7d81,...