Cross-Site Request Forgery (CSRF)

gin is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability occurs because the plugin does not require POST requests for an HTTP endpoint, which allows allows an attacker to copy a malicious folder, which could then be used to steal data or execute arbitrary code...

CVE-2023-40338

A flaw was found in the Jenkins Folders plugin. Affected versions of this plugin display an error message that includes an absolute path of a log file when attempting to access the Scan Organization Folder Log if no logs are available. This flaw exposes information about the Jenkins controller fi...

CVE-2023-40336

A flaw was found in the Jenkins Folders Plugin. Affected versions of this plugin allow attackers to copy folders...

org.jenkins-ci.plugins:job-dsl (>=1.20, <=1.28) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (4.2)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.20, =1.28 Source cves: CVE-2023-40337 Source...

org.jenkins-ci.plugins:seed (>=1.0-beta.2, <=2.1.4) potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.11)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:seed =1.0-beta.2, =2.1.4 Source cves: CVE-2023-40336 Source...

io.jenkins.blueocean:blueocean (>=1.0-alpha-3, <=1.0.0-b11), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-3, <=1.0.0-b11) +13 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.10)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-3, =1.0-alpha-3, =1.0-alpha-3,...

org.jenkins-ci.plugins:job-dsl (>=1.29, <=1.32) potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (4.4)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.29, =1.32 Source cves: CVE-2023-40336 Source...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11-beta-2, <=1.11-beta-3), org.jenkins-ci.plugins:branch-api (>=0.2-beta-6, <=0.2-beta-7) potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.1-beta-1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =1.11-beta-2,...

org.jenkins-ci.plugins:vsphere-cloud (>=2.15, <=2.21) potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.2.2)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:vsphere-cloud =2.15, =2.21 Source cves: CVE-2023-40336...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.4, <=0.4.1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11, <=1.14-beta-1) +3 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.4, =1.11, =1.0...

org.jenkins-ci.plugins:vsphere-cloud (>=2.15, <=2.21) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.2.2)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:vsphere-cloud =2.15, =2.21 Source cves: CVE-2023-40337...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11-beta-2, <=1.11-beta-3), org.jenkins-ci.plugins:branch-api (>=0.2-beta-6, <=0.2-beta-7) potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.1-beta-1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =1.11-beta-2,...

org.jenkins-ci.plugins:seed (>=1.0-beta.2, <=2.1.4) potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.11)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:seed =1.0-beta.2, =2.1.4 Source cves: CVE-2023-40338 Source...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +5 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.2.1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.4, <=0.4.1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11, <=1.14-beta-1) +3 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.4, =1.11, =1.0...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.57.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40337 Source advisory: GHSA-22C3-WHJV-HRFM...

org.jenkins-ci.plugins:job-dsl (>=1.20, <=1.28) potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (4.2)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.20, =1.28 Source cves: CVE-2023-40338 Source...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24) +12 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.17)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.0.0-b22...

io.jenkins.blueocean:blueocean-github-pipeline (1.0.0-b19-beta-1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.10, <=2.11-beta-1) +2 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.16)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean-github-pipeline 1.0.0-b19-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.1, <=2.4), org.jenkins-ci.plugins:github-organization-folder (>=1.3, <=1.4) potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.8)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =2.1, =1.3, =1.4 Source cves:...