Lucene search
+L

52 matches found

CNNVD
CNNVD
•added 2022/03/29 12:00 a.m.•18 views

Jenkins Flaky Test Handler Plugin 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Flaky Test Handler Plugin 1.2.1...

8.1CVSS5.7AI score0.01012EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•6 views

CVE-2022-28140: Improper Restriction of XML External Entity Reference

Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS7.6AI score0.01012EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/04/01 12:00 a.m.•17 views

Jenkins Flaky Test Handler Plugin Cross-site Fraudulently

The vulnerability of the “Deflake this build” function in the Jenkins Flaky Test Handler Plugin is related to the lack of protection against Cross-Site Request Forgery CSRF attacks. Exploiting this vulnerability allows a malicious actor to perform CSRF attacks remotely...

5CVSS5.5AI score0.00679EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2020/08/14 12:00 a.m.•20 views

CloudBees Jenkins Flaky Test Handler Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

4.3CVSS6.9AI score0.00679EPSS
SaveExploits0References1
NVD
NVD
•added 2020/08/12 2:15 p.m.•31 views

CVE-2020-2237

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.3CVSS4.6AI score0.00679EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2020/08/12 2:15 p.m.•23 views

CVE-2020-2237

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.3CVSS6.7AI score
SaveExploits0References2
Prion
Prion
•added 2020/08/12 2:15 p.m.•27 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.3CVSS4.6AI score0.00679EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/08/12 1:25 p.m.•4 views

CVE-2020-2237

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

5.3CVSS0.00679EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2020/08/12 1:25 p.m.•33 views

CVE-2020-2237

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.5AI score0.00679EPSS
SaveExploits0References2
CVE
CVE
•added 2020/08/12 1:25 p.m.•92 views

CVE-2020-2237

The CVE-2020-2237 entry pertains to a CSRF vulnerability in Jenkins Flaky Test Handler Plugin (versions 1.0.4 and earlier). The flaw allows an attacker to trigger a rebuild of a project at a previous git revision via the plugin's Deflake this build feature due to insufficient request validation. ...

4.3CVSS4.5AI score0.00679EPSS
SaveExploits0References2Affected Software1
Jenkins Security Advisories
Jenkins Security Advisories
•added 2020/08/12 12:00 a.m.•26 views

CSRF vulnerability in flaky-test-handler

flaky-test-handler 1.0.4 and earlier does not require POST requests for the "Deflake this build" feature, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to rebuild a project at a previous git revision where the tests were failing. As of publicati...

4.3CVSS4.9AI score0.00679EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/12 12:00 a.m.•7 views

CVE-2020-2237: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.3CVSS5.7AI score0.00679EPSS
SaveExploits0References2
Rows per page
Query Builder