EUVD-2024-0789

Malicious code in bioql PyPI...

CVE-2024-28160

Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...

CVE-2019-10441

A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials...

CVE-2024-28160

Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...

CVE-2019-10442

Vulnerability (CVE-2019-10442): Jenkins iceScrum Plugin versions 1.1.5 and earlier suffer from a missing permission check that allows attackers with Overall/Read permissions to connect to an attacker-specified URL using attacker-specified credentials. The issue is mitigated by upgrading to versio...