org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2020-2101 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.17, <=0.19), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.20, <=0.22) +9 more potentially affected by CVE-2019-10384 via org.jenkins-ci.main:jenkins-core (1.411)

org.jenkins-ci.main:jenkins-core MAVEN version 1.411 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.17, =0.20, =1.7, =1.17, =1.18 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2019-10352 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

io.jenkins.plugins:tricentis-ci (>=1.0, <=1.3), org.jenkins-ci.plugins.workflow:workflow-cps (>=2.37, <=2.38) +3 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.30)

org.jenkins-ci.plugins:script-security MAVEN version 1.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:tricentis-ci =1.0, =2.37, =1.22-beta-1, =1.10, =1.5, =1.6 Source...

new packages: junit

An update is available for junit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Improper Neutralization of Input During Web Page Generation in Google Web Toolkit

Multiple cross-site scripting XSS vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit GWT before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

GHSA-X24Q-XWRF-66JM Improper Neutralization of Input During Web Page Generation in Google Web Toolkit

Multiple cross-site scripting XSS vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit GWT before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2017-17383 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2016-3723 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2017-1000356 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

GHSA-4RJ6-9PJH-882R Improper Restriction of XML External Entity Reference in Jenkins JUnit Plugin

Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +228 more potentially affected by CVE-2018-1000056 via org.jenkins-ci.plugins:junit (>=1.0, <=1.23)

org.jenkins-ci.plugins:junit MAVEN version =1.0, =1.0.5.0, =0.2, =1.9.2-beta, =1.28.0, =2.37.0, =1.7.2, =1.1.2, =1.2.5, =1.1, =1.0.22, =2.2, =2.20 and more Source cves: CVE-2018-1000056 Source advisory: GHSA-4RJ6-9PJH-882R...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +228 more potentially affected by CVE-2018-1000056 via org.jenkins-ci.plugins:junit (>=1.0, <=1.23)

org.jenkins-ci.plugins:junit MAVEN version =1.0, =1.0.5.0, =0.2, =1.9.2-beta, =1.28.0, =2.37.0, =1.7.2, =1.1.2, =1.2.5, =1.1, =1.0.22, =2.2, =2.20 and more Source cves: CVE-2018-1000056 Source advisory: OSV:GHSA-4RJ6-9PJH-882R...

Jenkins JUnit Plugin CSRF vulnerability

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

GHSA-X9GM-M8PP-54VX Jenkins JUnit Plugin CSRF vulnerability

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +229 more potentially affected by CVE-2018-1000411 via org.jenkins-ci.plugins:junit (>=1.0, <=1.24)

org.jenkins-ci.plugins:junit MAVEN version =1.0, =1.0.5.0, =0.2, =1.9.2-beta, =1.28.0, =2.37.0, =1.7.2, =1.1.2, =1.2.5, =1.1, =1.0.22, =2.2, =2.20 and more Source cves: CVE-2018-1000411 Source advisory: GHSA-X9GM-M8PP-54VX...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +229 more potentially affected by CVE-2018-1000411 via org.jenkins-ci.plugins:junit (>=1.0, <=1.24)

org.jenkins-ci.plugins:junit MAVEN version =1.0, =1.0.5.0, =0.2, =1.9.2-beta, =1.28.0, =2.37.0, =1.7.2, =1.1.2, =1.2.5, =1.1, =1.0.22, =2.2, =2.20 and more Source cves: CVE-2018-1000411 Source advisory: OSV:GHSA-X9GM-M8PP-54VX...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2018-1999006 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2018-1999042 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2018-1999046 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...