io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.2.0-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0.1) +14 more potentially affected by CVE-2017-1000087 via org.jenkins-ci.plugins:github-branch-source (>=1.3, <=2.0.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version =1.3, =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-4, =1.0-alpha-1, =1.3.0-alpha.1, =0.26, =1.0-beta-1, =1.0, =1.0-alpha-2, =1.0 - org.jenkins-ci.plugins:pipeline-github-lib...

PT-2017-10796

Name of the Vulnerable Software and Affected Versions GitHub Branch Source Plugin affected versions not specified Description The GitHub Branch Source Plugin has a functionality that connects to a user-specified GitHub API URL as part of form validation and completion. This functionality improper...

PT-2017-10792

Name of the Vulnerable Software and Affected Versions GitHub Branch Source affected versions not specified Description The issue concerns a lack of permission checks in GitHub Branch Source, allowing users with Overall/Read permission to obtain a list of valid credential IDs. This could be...