org.jenkins-ci.main:jenkins-test-harness (1.430), org.jenkins-ci.main:jenkins-war (1.430) +6 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.430)

org.jenkins-ci.main:jenkins-core MAVEN version 1.430 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.430 - org.jenkins-ci.main:jenkins-war 1.430 -...

org.jenkins-ci.main:jenkins-test-harness (1.430), org.jenkins-ci.main:jenkins-war (1.430) +6 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.430)

org.jenkins-ci.main:jenkins-core MAVEN version 1.430 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.430 - org.jenkins-ci.main:jenkins-war 1.430 -...

org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:git (2.0.1) +4 more potentially affected by CVE-2022-29036 via org.jenkins-ci.plugins:credentials (1.9.3)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.biouno:uno-choice =1.0, =1.8.3, =1.8.5 - org.jenkins-ci.plugins:scriptler 2.7 -...

Stored XSS vulnerability in Jenkins Scriptler Plugin

Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Scriptler/Configure permission. Jenkins Scriptler Plugin 3.3 escapes parameter names shown in jo...

com.seitenbau.jenkins.plugins:dynamicparameter (0.2.0) potentially affected by CVE-2021-21667 via org.jenkins-ci.plugins:scriptler (2.2)

org.jenkins-ci.plugins:scriptler MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:scriptler and may be impacted: - com.seitenbau.jenkins.plugins:dynamicparameter 0.2.0 Source cves: CVE-2021-21667 Source advisory:...

org.biouno:uno-choice (>=1.5-alpha-1, <=1.5.3) potentially affected by CVE-2021-21667 via org.jenkins-ci.plugins:scriptler (2.9)

org.jenkins-ci.plugins:scriptler MAVEN version 2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:scriptler and may be impacted: - org.biouno:uno-choice =1.5-alpha-1, =1.5.3 Source cves: CVE-2021-21667 Source advisory:...

org.biouno:uno-choice (>=1.0, <=1.4) potentially affected by CVE-2021-21667 via org.jenkins-ci.plugins:scriptler (2.7)

org.jenkins-ci.plugins:scriptler MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:scriptler and may be impacted: - org.biouno:uno-choice =1.0, =1.4 Source cves: CVE-2021-21667 Source advisory:...

GHSA-P479-RWHP-RWJX Stored XSS vulnerability in Jenkins Scriptler Plugin

Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Scriptler/Configure permission. Jenkins Scriptler Plugin 3.3 escapes parameter names shown in jo...

com.seitenbau.jenkins.plugins:dynamicparameter (0.2.0) potentially affected by CVE-2021-21668 via org.jenkins-ci.plugins:scriptler (2.2)

org.jenkins-ci.plugins:scriptler MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:scriptler and may be impacted: - com.seitenbau.jenkins.plugins:dynamicparameter 0.2.0 Source cves: CVE-2021-21668 Source advisory:...

Stored XSS vulnerability in Jenkins Scriptler Plugin

Jenkins Scriptler Plugin 3.1 and earlier does not escape script content. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Scriptler/Configure permission. Jenkins Scriptler Plugin 3.2 escapes script content...

org.biouno:uno-choice (>=1.0, <=1.4) potentially affected by CVE-2021-21668 via org.jenkins-ci.plugins:scriptler (2.7)

org.jenkins-ci.plugins:scriptler MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:scriptler and may be impacted: - org.biouno:uno-choice =1.0, =1.4 Source cves: CVE-2021-21668 Source advisory:...

GHSA-5C6C-W4C4-VGVX Stored XSS vulnerability in Jenkins Scriptler Plugin

Jenkins Scriptler Plugin 3.1 and earlier does not escape script content. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Scriptler/Configure permission. Jenkins Scriptler Plugin 3.2 escapes script content...

org.biouno:uno-choice (>=1.5-alpha-1, <=1.5.3) potentially affected by CVE-2021-21668 via org.jenkins-ci.plugins:scriptler (2.9)

org.jenkins-ci.plugins:scriptler MAVEN version 2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:scriptler and may be impacted: - org.biouno:uno-choice =1.5-alpha-1, =1.5.3 Source cves: CVE-2021-21668 Source advisory:...

Jenkins Cross-Site Scripting Vulnerability (CNVD-2021-93374)

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.A cross-site scripting vulnerability exists in the Jenkins Plugin, which stems from the Scriptler plugin version 3.3 and...

CVE-2021-21700

Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting XSS vulnerability exploitable by exploitable by attackers able to create Scriptler scripts...

CVE-2021-21700

Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting XSS vulnerability exploitable by exploitable by attackers able to create Scriptler scripts...

CVE-2021-21700

Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting XSS vulnerability exploitable by exploitable by attackers able to create Scriptler scripts...

Cross site scripting

Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting XSS vulnerability exploitable by exploitable by attackers able to create Scriptler scripts...

CVE-2021-21700

Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting XSS vulnerability exploitable by exploitable by attackers able to create Scriptler scripts...

CVE-2021-21700

CVE-2021-21700 affects the Jenkins Scriptler Plugin. Documents confirm a stored XSS in Scriptler Plugin versions 3.3 and earlier caused by failing to escape the name of scripts on the UI during deletion confirmation. The vulnerability can be exploited by attackers who can create Scriptler scripts...