3009 matches found
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21609 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21608 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21604 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21602 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
GHSA-2WF5-4MF7-VMH3 CSRF vulnerability in Jenkins Active Directory Plugin
Jenkins Active Directory Plugin 2.19 and earlier does not require POST requests for multiple HTTP endpoints implementing connection and authentication tests, resulting in cross-site request forgery CSRF vulnerabilities. This vulnerability allows attackers to perform connection tests, connecting t...
CSRF vulnerability in Jenkins Active Directory Plugin
Jenkins Active Directory Plugin 2.19 and earlier does not require POST requests for multiple HTTP endpoints implementing connection and authentication tests, resulting in cross-site request forgery CSRF vulnerabilities. This vulnerability allows attackers to perform connection tests, connecting t...
Missing permission check in Blue Ocean Plugin
Updated 2020-09-16 This entry previously misidentified the problematic behavior. The HTTP request itself is legitimate, but only authorized users should be able to perform it. Original Description Blue Ocean Plugin 1.23.2 and earlier does not perform permission checks in several HTTP endpoints...
GHSA-VC7G-4269-F7HW Missing permission check in Blue Ocean Plugin
Updated 2020-09-16 This entry previously misidentified the problematic behavior. The HTTP request itself is legitimate, but only authorized users should be able to perform it. Original Description Blue Ocean Plugin 1.23.2 and earlier does not perform permission checks in several HTTP endpoints...
GHSA-VJF8-XW6C-WJHQ CSRF vulnerability in Jenkins Flaky Test Handler Plugin
Flaky Test Handler Plugin 1.0.4 and earlier does not require POST requests for the "Deflake this build" feature, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to rebuild a project at a previous git revision where the tests were failing...
CSRF vulnerability in Jenkins Flaky Test Handler Plugin
Flaky Test Handler Plugin 1.0.4 and earlier does not require POST requests for the "Deflake this build" feature, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to rebuild a project at a previous git revision where the tests were failing...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2220 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2160 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2162 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2163 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2105 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2103 via org.jenkins-ci.main:jenkins-core (1.587)
org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...
Cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin
A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system...
Jenkins WebSphere Deployer Plugin missing permission check
Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to perform connection tests, determine whether files with an attacker-specified path exist on the Jenkins controller file system...
org.wildfly.core:wildfly-core-dist (3.0.0.beta23), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta23) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.beta23)
org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.beta23 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta23 -...