org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.1.3), org.jenkins-ci.plugins:azure-app-service (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.2)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.0, =0.1.1, =0.1.0, =0.1.1 Source cves:...

org.jenkins-ci.plugins:azure-acs (>=0.2.0, <=0.2.2), org.jenkins-ci.plugins:azure-app-service (0.2.0) +3 more potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.4.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.2.0, =0.6.1, =0.9.0 -...

org.jenkins-ci.plugins:azure-acs (0.2.4) potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.6.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.4 Source cves: CVE-2023-25768 Source...

org.jenkins-ci.plugins:azure-acs (>=0.2.0, <=0.2.2), org.jenkins-ci.plugins:azure-app-service (0.2.0) +3 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.4.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.2.0, =0.6.1, =0.9.0 -...

org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.1.3), org.jenkins-ci.plugins:azure-app-service (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.2)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.0, =0.1.1, =0.1.0, =0.1.1 Source cves:...

org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.1.3), org.jenkins-ci.plugins:azure-app-service (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.2)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.0, =0.1.1, =0.1.0, =0.1.1 Source cves:...

org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.3)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...

org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.3)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...

org.jenkins-ci.plugins:azure-acs (0.2.3), org.jenkins-ci.plugins:azure-app-service (>=0.3.0, <=0.4.2) +6 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.6.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.3 - org.jenkins-ci.plugins:azure-app-servi...

org.jenkins-ci.plugins:azure-acs (0.2.4) potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.6.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.4 Source cves: CVE-2023-25766 Source...

org.jenkins-ci.plugins:azure-acs (0.2.4) potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.6.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.4 Source cves: CVE-2023-25767 Source...

RCE vulnerability in azure-acs

azure-acs 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types. This results in a remote code execution RCE vulnerability exploitable by users able to provide YAML input files to azure-acs's build step. azure-acs 1.0.2 configures its YAML parser to...