com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1) potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (1.2.0)

org.jenkins-ci.plugins:git MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 Source cves: CVE-2022-36882 Source...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (1.2.0)

org.jenkins-ci.plugins:git MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 Source cves: CVE-2022-36883 Source...

com.nirima:docker-plugin (>=0.9-beta1, <=0.13.0), com.nirima:docker-plugin-parent (>=0.9-beta1, <=0.13.0) +26 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.565.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.9-beta1, =0.9-beta1, =2.13.0-beta-2, =1.0, =1.0, =1.0, =0.1.0,...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.0), com.cloudbees.plugins:build-flow-plugin (>=0.10, <=0.17) +85 more potentially affected by CVE-2021-21695 via org.jenkins-ci.main:jenkins-core (1.480)

org.jenkins-ci.main:jenkins-core MAVEN version 1.480 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.0 -...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1) potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (1.2.0)

org.jenkins-ci.plugins:git MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 Source cves: CVE-2021-21684 Source...

com.gurkensalat.jenkins-ci.plugins:transifex (0.1.0), com.rubiconred.jenkins:myst-plugin (>=2.4.3.1, <=2.5.0.0) +39 more potentially affected by CVE-2021-21671 via org.jenkins-ci.main:jenkins-core (1.509.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.gurkensalat.jenkins-ci.plugins:transifex 0.1.0 - com.rubiconred.jenkins:myst-plugin...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (2.22.0-beta-1), io.jenkins.plugins:screenrecorder (>=0.3, <=0.7) +14 more potentially affected by CVE-2021-21615 via org.jenkins-ci.main:jenkins-core (1.625)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 2.22.0-beta-1 -...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (2.22.0-beta-1), io.jenkins.plugins:screenrecorder (>=0.3, <=0.7) +14 more potentially affected by CVE-2020-2221 via org.jenkins-ci.main:jenkins-core (1.625)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 2.22.0-beta-1 -...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2020-2220 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1) potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (1.2.0)

org.jenkins-ci.plugins:git MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 Source cves: CVE-2020-2136 Source...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2020-2105 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (2.22.0-beta-1), io.jenkins.plugins:screenrecorder (>=0.3, <=0.7) +14 more potentially affected by CVE-2020-2104 via org.jenkins-ci.main:jenkins-core (1.625)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 2.22.0-beta-1 -...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2020-2099 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...

com.nirima:docker-plugin (>=0.9-beta1, <=0.13.0), com.nirima:docker-plugin-parent (>=0.9-beta1, <=0.13.0) +26 more potentially affected by CVE-2020-2102 via org.jenkins-ci.main:jenkins-core (1.565.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.9-beta1, =0.9-beta1, =2.13.0-beta-2, =1.0, =1.0, =1.0, =0.1.0,...

Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin

A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials...

GHSA-VMVP-2HHX-RGM8 Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin

A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials...

Missing permission check in Jenkins Gerrit Trigger Plugin

A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials, or determine the existence of a file with a given path on the Jenkins maste...

GHSA-4R39-F4RH-J6Q8 Missing permission check in Jenkins Gerrit Trigger Plugin

A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials, or determine the existence of a file with a given path on the Jenkins maste...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1), org.jenkins-ci.plugins:git (1.2.0) potentially affected by CVE-2019-10392 via org.jenkins-ci.plugins:git-client (1.0.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 -...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1) potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (1.2.0)

org.jenkins-ci.plugins:git MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 Source cves: CVE-2022-30949 Source...