Jenkins Plugin Cross-Site Request Forgery Vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins batch task Plugin 1.19 and earlier versions are vulnerable to cross-site request forgery. An attacker with...

CVE-2022-23115: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

PT-2022-15858 · Jenkins · Jenkins Batch Task Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins batch task Plugin versions 1.19 and earlier Description: The issue allows attackers with Overall/Read access to perform certain actions due to cross-site request forgery CSRF vulnerabilities. These actions include retrieving logs,...

CVE-2020-13419

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task...

Directory traversal

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task...

CVE-2020-13419

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task...

CVE-2020-13419

CVE-2020-13419 concerns OpenIAM before 4.2.0.3, where a directory traversal vulnerability exists in the Batch task. The available connected sources confirm the affected product is OpenIAM (identity and access management platform) and the root cause is a directory traversal issue in batch task pro...

PT-2021-9607

Name of the Vulnerable Software and Affected Versions OpenIAM versions prior to 4.2.0.3 Description The issue allows Directory Traversal in the Batch task. Recommendations For versions prior to 4.2.0.3, update to version 4.2.0.3 or later to resolve the issue...

CVE-2020-13419: Improper Limitation of a Pathname to a Restricted Directory

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task...

CVE-2020-7184

A viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

HPE Intelligent Management Center (IMC) viewBatchTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A viewBatchTaskResultDetailFact expression language injection remote code execution vulnerability exists i...