org.jenkins-ci.plugins.workflow:workflow-multibranch (2.10-beta-1), org.jenkins-ci.plugins:branch-api (2.0.0-beta-1) +2 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.15)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch 2.10-beta-1 -...

io.jenkins.blueocean:blueocean-github-pipeline (1.0.0-b19-beta-1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.10, <=2.11-beta-1) +2 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.16)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean-github-pipeline 1.0.0-b19-beta-1 -...

io.jenkins.blueocean:blueocean-github-pipeline (1.0.0-b19-beta-1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.10, <=2.11-beta-1) +2 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.16)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean-github-pipeline 1.0.0-b19-beta-1 -...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-config (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1) +8 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.17-beta-1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1, =1.0.0-b19-beta-1,...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-config (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1) +8 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.17-beta-1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1, =1.0.0-b19-beta-1,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24) +12 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.17)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.0.0-b22...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24) +12 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.17)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.0.0-b22...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24) +12 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.17)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.0.0-b22...

io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.30), io.jenkins.blueocean:blueocean (1.0.0-b25) +12 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.18)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.9.1, =2.15, =1.0, =1.7.6, =1.8.15...

io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.30), io.jenkins.blueocean:blueocean (1.0.0-b25) +12 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.18)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.9.1, =2.15, =1.0, =1.7.6, =1.8.15...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.54.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40337 Source advisory:...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.54.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40336 Source advisory:...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.54.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40337 Source advisory: GHSA-22C3-WHJV-HRFM...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.54.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40338 Source advisory: GHSA-36HQ-V2FC-RPQP...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.54.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40336 Source advisory: GHSA-4VQP-PCM3-73XP...

org.jenkins-ci.plugins:job-dsl (>=1.29, <=1.32) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (4.4)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.29, =1.32 Source cves: CVE-2023-40337 Source...

org.jenkins-ci.plugins:radiatorviewplugin (>=1.28, <=1.29), org.jenkins-ci.plugins:security-inspector (0.3) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.13)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:radiatorviewplugin =1.28, =1.29 -...

io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.30), io.jenkins.blueocean:blueocean (1.0.0-b25) +12 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.18)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.9.1, =2.15, =1.0, =1.7.6, =1.8.15...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.54.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40338 Source advisory:...

CSRF vulnerability in cloudbees-folder

cloudbees-folder 6.846.v23698686f0f6 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to copy a view inside a folder. cloudbees-folder 6.848.ve3bfd7839a81 requires POST requests for t...