io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.27.17, <=1.27.18), org.jenkins-ci.plugins.workflow:workflow-multibranch (795.ve0cb_1f45ca_9a) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3908.vd6b_b_5a_a_54010)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3908.vd6bb5aa54010 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-pipeline-scm-api =1.27.17,...

io.jenkins.blueocean:blueocean-rest-impl (>=1.27.7, <=1.27.11) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3774.v4a_d648d409ce)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3774.v4ad648d409ce is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-rest-impl =1.27.7, =1.27.11...

io.jenkins.blueocean:blueocean-rest-impl (>=1.27.4, <=1.27.5.1), io.jenkins.plugins:cdevents (>=v0.1.0-draft6-16.v8ca_10874de34, <=1-24.v0250517580b_2) +6 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3659.v582dc37621d8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3659.v582dc37621d8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-rest-impl =1.27.4,...

io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4), io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.2.0-beta-5, <=1.3.6) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.39)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-5, =1.2.0-beta-5...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +7 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.19)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.27.12, <=1.27.16), io.jenkins.plugins:coverage (>=1.11.0, <=1.16.1) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3832.vc43e04d6d68c)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3832.vc43e04d6d68c is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-pipeline-scm-api =1.27.12,...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +9 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.25)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

io.jenkins.blueocean:blueocean (>=1.0.0-b04, <=1.0.0-b17), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b04, <=1.0.0-b17) +6 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.15)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b04, =1.0.0-b04, =1.0.0-b04,...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.4, <=2.8), org.jenkins-ci.plugins:blueocean-display-url (>=1.1, <=2.2.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =2.4, =1.1, =2.2.0...

com.arkea.satd:xlrelease-var-setter (>=0.2, <=0.4), io.jenkins.blueocean:blueocean (>=1.0.0-b02, <=1.0.0-b12) +3 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.22)

org.jenkins-ci.plugins:script-security MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.arkea.satd:xlrelease-var-setter =0.2, =1.0.0-b02, =1.2.1, =2.0, =0.1, =0.5 Sourc...

com.amazon.jenkins.fleet:ec2-fleet (>=1.0, <=1.17.3), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +15 more potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (1.0)

org.jenkins-ci.plugins:plain-credentials MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - com.amazon.jenkins.fleet:ec2-fleet =1.0, =1.4, =1.0.0-b13, =1.0-alpha-3, =0.3,...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +13 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.23)

org.jenkins-ci.plugins:script-security MAVEN version 1.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.27.12, <=1.27.16), io.jenkins.plugins:coverage (>=1.11.0, <=1.16.1) +6 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1305.v487433146192)

org.jenkins-ci.plugins:script-security MAVEN version 1305.v487433146192 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean-pipeline-scm-api =1.27.12, =1.11.0,...

com.openshift.jenkins.plugins:openshift-client (>=1.1.0.420.v8817277c1990, <=1.1.0.422.va_241c0c97580), com.paul8620.jenkins.plugins:pipeline-aggregator-view (104.v94a_e5f6cdb_c3) +45 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1251.vfe552ed55f8d)

org.jenkins-ci.plugins:script-security MAVEN version 1251.vfe552ed55f8d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client =1.1.0.420.v8817277c199...

com.arkea.satd:xlrelease-var-setter (>=0.2, <=0.4), io.jenkins.blueocean:blueocean (>=1.0.0-b02, <=1.0.0-b12) +3 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.22)

org.jenkins-ci.plugins:script-security MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.arkea.satd:xlrelease-var-setter =0.2, =1.0.0-b02, =1.2.1, =2.0, =0.1, =0.5 Sourc...

com.arkea.satd:xlrelease-var-setter (>=0.2, <=0.4), io.jenkins.blueocean:blueocean (>=1.0.0-b02, <=1.0.0-b12) +3 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1.22)

org.jenkins-ci.plugins:script-security MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.arkea.satd:xlrelease-var-setter =0.2, =1.0.0-b02, =1.2.1, =2.0, =0.1, =0.5 Sourc...

com.lookout.jenkins:environment-script (100.v3a_f1a_6a_b_7549), com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer (>=2.4.2, <=2.5.2) +38 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1229.v4880b_b_e905a_6)

org.jenkins-ci.plugins:script-security MAVEN version 1229.v4880bbe905a6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.lookout.jenkins:environment-script 100.v3af1a6ab7549 -...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6) +37 more potentially affected by CVE-2024-23899 via org.jenkins-ci.plugins:git-server (1.5)

org.jenkins-ci.plugins:git-server MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta, =1.3.0, =1.0.0-b15, =1.0.0-rc2, =1.0.0-rc2,...

CVE-2023-40341

A flaw was found in the blueocean Jenkins plugin. Affected versions of this plugin allow attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24) +12 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.17)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.0.0-b22...