org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-8), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-8) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-8 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.0-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.0-beta-1) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (1.0-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.0-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.1) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (1.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.4.1) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (1.4.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.4.2) potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (1.4.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.3-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.3-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =0.1-beta-4 Source cves:...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-5, <=0.1-beta-7) +4 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.6)

org.jenkins-ci.plugins:script-security MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5,...

Cybozu Garoon Authorization Issue Vulnerability (CNVD-2022-54304)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon, which stems from improper privilege management in...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) potentially affected by CVE-2017-1000092 via org.jenkins-ci.plugins:git (2.3-beta-1)

org.jenkins-ci.plugins:git MAVEN version 2.3-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =0.1-beta-4 Source cves:...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +22 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (>=2.0.0-beta1, <=2.4.0)

org.jenkins-ci.plugins:git-client MAVEN version =2.0.0-beta1, =1.28.0, =y, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =2.8, =2.2.0-alpha-1, =1.0, =1.40.0, =3.0.0-beta1, =3.4.1 and more Source...

Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in workflow-cps

workflow-cps allows pipelines to load Groovy source files. This is intended to be used to allow Global Shared Libraries to execute without sandbox protection. In workflow-cps 2689.v434009a31bf1 and earlier, any Groovy source files bundled with Jenkins core and plugins could be loaded this way and...

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1584CyVDB-2670 Operation restriction bypass vulnerability in Bulletin CWE-285 - CVE-2022-28718 CyVDB-1865CyVDB-2692 Operation restriction bypass vulnerability in Workflow CWE-285 - CVE-2022-27661...

Cybozu Garoon security vulnerability

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon, which stems from improper privilege management in...

JVN#73897863: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1584CyVDB-2670 Operation restriction bypass vulnerability in Bulletin CWE-285 - CVE-2022-28718 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N| Base Score: 4.3 CVS...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2017-17383 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

org.jenkins-ci.main:jenkins-test-harness (1.572), org.jenkins-ci.main:jenkins-war (1.572) +14 more potentially affected by CVE-2017-17383 via org.jenkins-ci.main:jenkins-core (1.572)

org.jenkins-ci.main:jenkins-core MAVEN version 1.572 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.572 - org.jenkins-ci.main:jenkins-war 1.572 -...

com.sonymobile.jenkins.plugins.kerberos-sso:kerberos-sso (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.568) +24 more potentially affected by CVE-2017-17383 via org.jenkins-ci.main:jenkins-core (1.568)

org.jenkins-ci.main:jenkins-core MAVEN version 1.568 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonymobile.jenkins.plugins.kerberos-sso:kerberos-sso =1.2, =1.4 -...

com.sonymobile.jenkins.plugins.kerberos-sso:kerberos-sso (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.568) +24 more potentially affected by CVE-2016-3723 via org.jenkins-ci.main:jenkins-core (1.568)

org.jenkins-ci.main:jenkins-core MAVEN version 1.568 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonymobile.jenkins.plugins.kerberos-sso:kerberos-sso =1.2, =1.4 -...

net.masterthought.jenkins:cucumber-reports (>=1.3.0, <=2.5.1), org.jenkins-ci.main:jenkins-test-harness (1.577) +21 more potentially affected by CVE-2016-3725 via org.jenkins-ci.main:jenkins-core (1.577)

org.jenkins-ci.main:jenkins-core MAVEN version 1.577 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.masterthought.jenkins:cucumber-reports =1.3.0, =2.5.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.572), org.jenkins-ci.main:jenkins-war (1.572) +14 more potentially affected by CVE-2016-3725 via org.jenkins-ci.main:jenkins-core (1.572)

org.jenkins-ci.main:jenkins-core MAVEN version 1.572 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.572 - org.jenkins-ci.main:jenkins-war 1.572 -...