54 matches found
org.jenkins-ci.plugins:continuum (1.0.1), org.jenkins-ci.plugins:flaky-test-handler (>=1.0.1, <=1.0.4) +2 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.4)
org.jenkins-ci.plugins:junit MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:continuum 1.0.1 - org.jenkins-ci.plugins:flaky-test-handler =1.0.1, =0.12, =0.23...
org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (2.2.2)
org.jenkins-ci.plugins:git MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =1.0.4 Source cves: CVE-2021-21684 Source advisory:...
GHSA-VJF8-XW6C-WJHQ CSRF vulnerability in Jenkins Flaky Test Handler Plugin
Flaky Test Handler Plugin 1.0.4 and earlier does not require POST requests for the "Deflake this build" feature, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to rebuild a project at a previous git revision where the tests were failing...
CSRF vulnerability in Jenkins Flaky Test Handler Plugin
Flaky Test Handler Plugin 1.0.4 and earlier does not require POST requests for the "Deflake this build" feature, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to rebuild a project at a previous git revision where the tests were failing...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) +5 more potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.8.0)
org.jenkins-ci.plugins:git-client MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =2.2.0...
org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.2.2)
org.jenkins-ci.plugins:git MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =1.0.4 Source cves: CVE-2022-30949 Source advisory:...
org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.2.2)
org.jenkins-ci.plugins:git MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =1.0.4 Source cves: CVE-2022-30947 Source advisory:...
org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) potentially affected by CVE-2017-1000092 via org.jenkins-ci.plugins:git (2.2.2)
org.jenkins-ci.plugins:git MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =1.0.4 Source cves: CVE-2017-1000092 Source advisory:...
org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) potentially affected by CVE-2018-1000182 via org.jenkins-ci.plugins:git (2.2.2)
org.jenkins-ci.plugins:git MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =1.0.4 Source cves: CVE-2018-1000182 Source advisory:...
org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) potentially affected by CVE-2019-1003010 via org.jenkins-ci.plugins:git (2.2.2)
org.jenkins-ci.plugins:git MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =1.0.4 Source cves: CVE-2019-1003010 Source advisory:...
org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.2.2)
org.jenkins-ci.plugins:git MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =1.0.4 Source cves: CVE-2018-1000110 Source advisory:...
Jenkins Flaky Test Handler Plugin XML External Entity Injection Vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Flaky Test Handler Plugin 1.2.1...
XXE vulnerability in Jenkins Flaky Test Handler Plugin
Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
GHSA-V4RR-65X6-G69F XXE vulnerability in Jenkins Flaky Test Handler Plugin
Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2022-28140
Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2022-28140
Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
Xxe
Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2022-28140
Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2022-28140
CVE-2022-28140 affects Jenkins Flaky Test Handler Plugin, version 1.2.1 and earlier. The root cause is that the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks. Per CNVD/GHSA, this XXE issue can enable an attacker to extract secrets from the Jenkins controller (...
