io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +5 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.2.1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.57.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40338 Source advisory:...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.4.2, <=0.5.1), com.lookout.jenkins:environment-script (1.2.5) +1 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.7)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.4.2, =1.0.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.4.2, <=0.5.1), com.lookout.jenkins:environment-script (1.2.5) +1 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.7)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.4.2, =1.0.0,...

io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.30), io.jenkins.blueocean:blueocean (1.0.0-b25) +12 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.18)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.9.1, =2.15, =1.0, =1.7.6, =1.8.15...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +5 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.2.1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.30), io.jenkins.blueocean:blueocean (1.0.0-b25) +12 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.18)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.9.1, =2.15, =1.0, =1.7.6, =1.8.15...

org.jenkins-ci.plugins.workflow:workflow-multibranch (1.11-beta-1), org.jenkins-ci.plugins:branch-api (0.2-beta-5) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (4.11-beta-1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 4.11-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch 1.11-beta-1 -...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.57.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40337 Source advisory:...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24) +12 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.17)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.0.0-b22...

com.compuware.jenkins:compuware-scm-downloader (>=1.6, <=2.0.5), com.compuware.jenkins:compuware-topaz-for-total-test (>=1.8, <=2.3.7) +31 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.12)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.compuware.jenkins:compuware-scm-downloader =1.6, =1.8, =1.0.2, =1.0.0,...

org.jenkins-ci.plugins:seed (>=0.8.0, <=0.20.0) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (4.7)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:seed =0.8.0, =0.20.0 Source cves: CVE-2023-40337 Source...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-config (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1) +8 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.17-beta-1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1, =1.0.0-b19-beta-1,...

com.compuware.jenkins:compuware-scm-downloader (>=1.6, <=2.0.5), com.compuware.jenkins:compuware-topaz-for-total-test (>=1.8, <=2.3.7) +31 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.12)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.compuware.jenkins:compuware-scm-downloader =1.6, =1.8, =1.0.2, =1.0.0,...

org.jenkins-ci.plugins.workflow:workflow-multibranch (2.10-beta-1), org.jenkins-ci.plugins:branch-api (2.0.0-beta-1) +2 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.15)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch 2.10-beta-1 -...

com.mig82:folder-properties (>=1.0, <=1.2.1), org.jenkins-ci.plugins:job-dsl (>=1.78, <=1.81.1) potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.14)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.mig82:folder-properties =1.0, =1.78, =1.81.1 Source cves: CVE-2023-40338 Sourc...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.1, <=2.4), org.jenkins-ci.plugins:github-organization-folder (>=1.3, <=1.4) potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.8)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =2.1, =1.3, =1.4 Source cves:...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0, <=2.57.0), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=2.0.0, <=2.2.0) +46 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (>=6.0.1, <=6.815.v0dd5a_cb_40e0e)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version =6.0.1, =2.33.0, =2.0.0, =7.5.7, =1.0.31, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =0.2.0, =1.1.0-beta-4, =1.27.11 and more Source cves: CVE-2023-40338 Source advisory: GHSA-36HQ-V2FC-RPQP...

CVE-2023-40338

Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier displays an error message that includes an absolute path of a log file when attempting to access the Scan Organization Folder Log if no logs are available, exposing information about the Jenkins controller file system...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders...