Cross-site Scripting (XSS)

org.jenkins-ci.plugins:cloudbees-jenkins-advisor is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper escaping of server responses, which allows an attacker to inject malicious scripts that execute in the context of users viewing the affected content...

Cross-site Scripting (XSS)

Overview org.jenkins-ci.plugins:cloudbees-jenkins-advisor is a plugin that proactively notifies you of problems with your Jenkins-based environment. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the failure to escape responses from the server. An attacker can...

Stored XSS vulnerability in cloudbees-jenkins-advisor

cloudbees-jenkins-advisor 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses. cloudbees-jenkins-advisor...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.3) potentially affected by CVE-2022-45383 via org.jenkins-ci.plugins:support-core (2.41)

org.jenkins-ci.plugins:support-core MAVEN version 2.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:support-core and may be impacted: - org.jenkins-ci.plugins:cloudbees-jenkins-advisor =1.0, =1.3 Source cves: CVE-2022-45383...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.4, <=1.5) potentially affected by CVE-2022-45383 via org.jenkins-ci.plugins:support-core (2.43)

org.jenkins-ci.plugins:support-core MAVEN version 2.43 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:support-core and may be impacted: - org.jenkins-ci.plugins:cloudbees-jenkins-advisor =1.4, =1.5 Source cves: CVE-2022-45383...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2022-45383 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2022-45383 Source advisory: MEND:CVE-2022-45383...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2021-21621 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2021-21621 Source advisory: OSV:GHSA-92PG-8G57-HQPX...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2021-21621 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2021-21621 Source advisory: GHSA-92PG-8G57-HQPX...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2019-16540 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2019-16540 Source advisory: GHSA-2CXG-448H-4WXJ...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2019-16540 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2019-16540 Source advisory: OSV:GHSA-2CXG-448H-4WXJ...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2019-16539 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2019-16539 Source advisory: GHSA-J52R-PMQV-WM38...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2019-16539 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2019-16539 Source advisory: OSV:GHSA-J52R-PMQV-WM38...

com.mobileenerlytics.eagle.tester:eagle-tester (>=1.0.6, <=1.0.9), hudson.plugins.signal_killer:signal-killer (1.1) +10 more potentially affected by CVE-2017-1000354 via org.jenkins-ci.main:jenkins-core (>=2.50, <=2.56)

org.jenkins-ci.main:jenkins-core MAVEN version =2.50, =1.0.6, =4.6.0.23, =2.50, =2.50, =2.0, =1.0, =0.2, =3.0, =0.2.6, =1.0-alpha-2, =0.13, =0.14 Source cves: CVE-2017-1000354 Source advisory: GHSA-R57F-7XW3-Q2R9...

com.mobileenerlytics.eagle.tester:eagle-tester (>=1.0.6, <=1.0.9), hudson.plugins.signal_killer:signal-killer (1.1) +10 more potentially affected by CVE-2017-1000354 via org.jenkins-ci.main:jenkins-core (>=2.50, <=2.56)

org.jenkins-ci.main:jenkins-core MAVEN version =2.50, =1.0.6, =4.6.0.23, =2.50, =2.50, =2.0, =1.0, =0.2, =3.0, =0.2.6, =1.0-alpha-2, =0.13, =0.14 Source cves: CVE-2017-1000354 Source advisory: OSV:GHSA-R57F-7XW3-Q2R9...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2022-25187 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2022-25187 Source advisory: OSV:GHSA-5M8F-V3GW-H94W...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2022-25187 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2022-25187 Source advisory: GHSA-5M8F-V3GW-H94W...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2022-25187 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2022-25187 Source advisory: MEND:CVE-2022-25187...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) +4 more potentially affected by CVE-2022-20621 via org.jenkins-ci.plugins:metrics (3.0.0)

org.jenkins-ci.plugins:metrics MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:metrics and may be impacted: - org.jenkins-ci.plugins:cloudbees-jenkins-advisor =1.0, =1.0, =2.0, =2.45.1 Source cves:...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2021-21621 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2021-21621 Source advisory: MEND:CVE-2021-21621...

Incorrect permission check in cloudbees-jenkins-advisor

cloudbees-jenkins-advisor 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to view an administrative configuration page. cloudbees-jenkins-advisor 3.2.1 requires Overall/Administer to view its administrative...