Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the Pipeline Snippet Generator. An attacker can instantiate types related to job or system configuration other than Pipeline steps by tricking a user with the necessary permissions into submitting a...

RHCOS 4 : OpenShift Container Platform 4.6.57 (RHSA-2022:1620)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1620 advisory. - haproxy: Denial of service via set-cookie2 header CVE-2022-0711 - workflow-cps: OS command execution through crafted SCM contents...

RHCOS 4 : OpenShift Container Platform 4.10.6 (RHSA-2022:1025)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1025 advisory. - workflow-cps: OS command execution through crafted SCM contents CVE-2022-25173 - workflow-cps-global-lib: OS command execution...

Code Injection

org.jenkins-ci.plugins.workflow, puppet-enterprise-pipeline is vulnerable to code injection The vulnerability is due to unsafe values specified in the custom Script Security whitelist, which allows an attacker with the ability to execute Script Security-protected scripts to execute arbitrary code...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12-beta-2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12-beta-2) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.12-beta-2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.12-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12-beta-2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1-beta-1) +1 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1-beta...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.9), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.9) +1 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (1.9)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.9 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-3), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11-beta-3) +1 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (1.11-beta-3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.11-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.11-beta-3 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12), org.jenkins-ci.plugins.workflow:workflow-cps (1.12) +3 more potentially affected by CVE-2018-1000058 via org.jenkins-ci.plugins.workflow:workflow-support (1.12)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.1) potentially affected by CVE-2019-1003041 via org.jenkins-ci.plugins.workflow:workflow-cps (1.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.4.2) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.4.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.2 -...