Jenkins < 1.482, < 1.466.2 LTS Multiple Vulnerabilities - Windows

Jenkins is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

columnpack:columnpack-plugin (1.0.3), com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.0, <=1.6.3) +634 more potentially affected by CVE-2012-4438 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.466.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.0, =0.1, =0.1, =0.5, =1.02.03, =1.0, =1.0.6 and more Source cves: CVE-2012-4438 Source advisory: OSV:GHSA-WR6P-J63R-XQHV...

columnpack:columnpack-plugin (1.0.3), com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.0, <=1.6.3) +634 more potentially affected by CVE-2012-4438 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.466.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.0, =0.1, =0.1, =0.5, =1.02.03, =1.0, =1.0.6 and more Source cves: CVE-2012-4438 Source advisory: SNYK:JAVA-ORGJENKINSCIMAIN-9402848...

columnpack:columnpack-plugin (1.0.3), com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.0, <=1.6.3) +634 more potentially affected by CVE-2012-4438 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.466.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.0, =0.1, =0.1, =0.5, =1.02.03, =1.0, =1.0.6 and more Source cves: CVE-2012-4438 Source advisory: GHSA-WR6P-J63R-XQHV...

com.amazonaws:aws-codepipeline (>=0.9, <=0.45), com.boxuk.jenkins:jslint (0.7.4) +158 more potentially affected by CVE-2012-4438 via org.jenkins-ci.main:jenkins-core (>=1.467, <=1.481)

org.jenkins-ci.main:jenkins-core MAVEN version =1.467, =0.9, =0.3, =0.10, =1.0.3, =1.3.3, =1.99.0-beta-1, =2.11.0-beta-1, =1.8.5, =1.15, =1.6.0, =1.0.0, =1.2.0 and more Source cves: CVE-2012-4438 Source advisory: OSV:GHSA-WR6P-J63R-XQHV...

com.amazonaws:aws-codepipeline (>=0.9, <=0.45), com.boxuk.jenkins:jslint (0.7.4) +158 more potentially affected by CVE-2012-4438 via org.jenkins-ci.main:jenkins-core (>=1.467, <=1.481)

org.jenkins-ci.main:jenkins-core MAVEN version =1.467, =0.9, =0.3, =0.10, =1.0.3, =1.3.3, =1.99.0-beta-1, =2.11.0-beta-1, =1.8.5, =1.15, =1.6.0, =1.0.0, =1.2.0 and more Source cves: CVE-2012-4438 Source advisory: SNYK:JAVA-ORGJENKINSCIMAIN-9402848...

com.amazonaws:aws-codepipeline (>=0.9, <=0.45), com.boxuk.jenkins:jslint (0.7.4) +158 more potentially affected by CVE-2012-4438 via org.jenkins-ci.main:jenkins-core (>=1.467, <=1.481)

org.jenkins-ci.main:jenkins-core MAVEN version =1.467, =0.9, =0.3, =0.10, =1.0.3, =1.3.3, =1.99.0-beta-1, =2.11.0-beta-1, =1.8.5, =1.15, =1.6.0, =1.0.0, =1.2.0 and more Source cves: CVE-2012-4438 Source advisory: GHSA-WR6P-J63R-XQHV...

CVE-2012-4438

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code...

columnpack:columnpack-plugin (1.0.3), com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.0, <=1.6.3) +634 more potentially affected by CVE-2012-4438 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.466.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.0, =0.1, =0.1, =0.5, =1.02.03, =1.0, =1.0.6 and more Source cves: CVE-2012-4438 Source advisory: MEND:CVE-2012-4438...

CVE-2012-4438

Jenkins core before 1.482 and LTS before 1.466.2 is vulnerable to an input-validation issue that allows a user with read and HTTP access to the Jenkins master to insert data and execute arbitrary code. Affected components are org.jenkins-ci.main:jenkins-core in Jenkins prior to these versions. Im...