br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2018-6356 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.5), com.cloudbees.jenkins.plugins:amazon-ecr (>=1.0-beta-1, <=1.4) +1 more potentially affected by CVE-2022-27199 via org.jenkins-ci.plugins:aws-credentials (1.10)

org.jenkins-ci.plugins:aws-credentials MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:aws-credentials and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0-beta-1, =1.0,...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +1 more potentially affected by CVE-2022-27198 via org.jenkins-ci.plugins:aws-credentials (1.11)

org.jenkins-ci.plugins:aws-credentials MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:aws-credentials and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =1.32, =1.40 Source...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +1 more potentially affected by CVE-2022-27199 via org.jenkins-ci.plugins:aws-credentials (1.11)

org.jenkins-ci.plugins:aws-credentials MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:aws-credentials and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =1.32, =1.40 Source...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.5), com.cloudbees.jenkins.plugins:amazon-ecr (>=1.0-beta-1, <=1.4) +1 more potentially affected by CVE-2022-27198 via org.jenkins-ci.plugins:aws-credentials (1.10)

org.jenkins-ci.plugins:aws-credentials MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:aws-credentials and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0-beta-1, =1.0,...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.5), org.jenkins-ci.main:jenkins-test-harness (1.625.2) +6 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.625.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0.1, =1.0.2 Source cves:...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +1715 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (>=1.396, <=2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0.0, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2020-2231 Source advisory: MEND:CVE-2020-2231...

CloudBees Jenkins AWSEB Deployment Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

CVE-2020-2174

Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability...

CVE-2020-2174

Summary (CVE-2020-2174, Jenkins AWSEB Deployment Plugin): Versions 0.3.19 and earlier are vulnerable to a reflected XSS due to input values used in form validation output not being escaped. This is achieved via unescaped user-supplied data reflected in the browser, enabling script execution in a ...

CVE-2020-2174

Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability...

CVE-2020-2174: Improper Neutralization of Input During Web Page Generation

Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability...

Reflected XSS vulnerability in awseb-deployment-plugin

awseb-deployment-plugin 0.3.19 and earlier does not escape various values printed as part of form validation output. This results in a reflected cross-site scripting XSS vulnerability. awseb-deployment-plugin 0.3.20 escapes the values printed as part of the affected form validation endpoints...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +1714 more potentially affected by CVE-2017-1000399 via org.jenkins-ci.main:jenkins-core (>=1.396, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0.0, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2017-1000399 Source advisory: MEND:CVE-2017-1000399...