Lucene search
K

364 matches found

Positive Technologies
Positive Technologies
added 2022/07/27 12:0 a.m.4 views

PT-2022-5099 · Jenkins · Jenkins Openshift Deployer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpenShift Deployer Plugin versions 1.2.0 and earlier Description: A missing permission check in the Jenkins OpenShift Deployer Plugin allows attackers with Overall/Read permission to check for the existence of an attacker-specified fi...

6.5CVSS6.3AI score0.00675EPSS
Exploits0References10
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.6 views

Jenkins OpenShift Deployer Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability ...

6.5CVSS6.5AI score0.00645EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/07/27 12:0 a.m.2 views

PT-2022-4025 · Jenkins · Jenkins Openshift Deployer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpenShift Deployer Plugin versions 1.2.0 and earlier Description: The issue is related to a missing permission check in the plugin, which can be exploited by attackers with Overall/Read permission to connect to an attacker-specified U...

6.8CVSS6.2AI score0.00645EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2022/07/27 12:0 a.m.3 views

PT-2022-4026 · Jenkins · Jenkins Openshift Deployer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpenShift Deployer Plugin versions 1.2.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified username and password. This issue aris...

7.8CVSS6.4AI score0.00463EPSS
Exploits0References9
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.3 views

Jenkins OpenShift Deployer Plugin 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site request...

6.5CVSS6.3AI score0.00463EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.3 views

Jenkins Plugin Deployer Framework 路径遍历漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A path traversal...

4.3CVSS5.2AI score0.00961EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.6 views

Jenkins Plugin Deployer Framework 路径遍历漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A path traversal...

8.8CVSS7.9AI score0.01424EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.4 views

Jenkins OpenShift Deployer Plugin 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site request...

6.5CVSS6.4AI score0.00463EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/07/27 12:0 a.m.4 views

PT-2022-4031 · Jenkins · Jenkins Deployer Framework Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Deployer Framework Plugin versions 85.v1d1888e8c021 and earlier Description: A missing permission check in the Jenkins Deployer Framework Plugin allows attackers with Item/Read permission but without Deploy Now/Deploy permission to re...

4.3CVSS4.4AI score0.0047EPSS
Exploits0References8
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.7 views

Jenkins Plugin Deployer Framework 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.2AI score0.0047EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.3 views

Jenkins OpenShift Deployer Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.6AI score0.00675EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/07/27 12:0 a.m.4 views

PT-2022-4017 · Jenkins · Jenkins Deployer Framework Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Deployer Framework Plugin versions 85.v1d1888e8c021 and earlier Description: The issue is related to the incorrect restriction of the application path when configuring a deployment, allowing attackers with Item/Configure permission to...

9CVSS8.4AI score0.01424EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2022/06/24 12:0 a.m.23 views

Cross-site Scripting in Jenkins CRX Content Package Deployer Plugin

Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.7AI score0.00753EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/06/24 12:0 a.m.23 views

GHSA-HC44-P2QQ-CFM9 Cross-site Scripting in Jenkins CRX Content Package Deployer Plugin

Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

8CVSS5.8AI score0.00753EPSS
Exploits0References3
CNVD
CNVD
added 2022/06/24 12:0 a.m.22 views

Jenkins CRX Content Package Deployer Plugin Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. a cross-site scripting vulnerability exists in Jenkins CRX Content Package...

3.5CVSS2.1AI score0.00753EPSS
Exploits0Affected Software1
OSV
OSV
added 2022/06/23 5:15 p.m.15 views

CVE-2022-34184

Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.3AI score
Exploits0References1
Cvelist
Cvelist
added 2022/06/22 2:41 p.m.21 views

CVE-2022-34184

Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

6.8AI score0.00753EPSS
Exploits0References1
CVE
CVE
added 2022/06/22 2:41 p.m.107 views

CVE-2022-34184

CVE-2022-34184 affects Jenkins CRX Content Package Deployer Plugin 1.9 and earlier. The issue is that the name and description of CRX Content Package Choice parameters are not escaped on parameter views, causing stored XSS exploitable by attackers with Item/Configure permission. Connected sources...

5.4CVSS5.2AI score0.00753EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/06/22 12:0 a.m.6 views

PT-2022-22052 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins CRX Content Package Deployer Plugin versions 1.9 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the plugin does not escape the name and description of CRX Content Package Choi...

8CVSS5.8AI score0.00753EPSS
Exploits0References8
CNNVD
CNNVD
added 2022/06/22 12:0 a.m.4 views

Jenkins Plugin CRX Content Package Deployer 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. a cross-site scripting vulnerability exists in Jenkins CRX Content Package...

5.4CVSS6.2AI score0.00753EPSS
Exploits0References4
Rows per page
Query Builder