379 matches found
org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.559)
org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...
Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin
Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes. This results in a stored cross-site scripting XSS vulnerability exploitable by users with Job/Configure permission. Matrix Project Plugin 1.17 escapes the axi...
org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.561)
org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +186 more potentially affected by CVE-2020-2225 via org.jenkins-ci.plugins:matrix-project (>=1.0-beta-1, <=1.14)
org.jenkins-ci.plugins:matrix-project MAVEN version =1.0-beta-1, =1.0.5.0, =0.2, =1.0.0, =1.9.2-beta, =0.5, =1.29, =1.14.0-alpha-1, =4.1.1, =1.1.1, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.8.2 and more Source cves: CVE-2020-2225 Source advisory: OSV:GHSA-W43X-5F8F-686P...
GHSA-W43X-5F8F-686P Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin
Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes. This results in a stored cross-site scripting XSS vulnerability exploitable by users with Job/Configure permission. Matrix Project Plugin 1.17 escapes the axi...
org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.559)
org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +186 more potentially affected by CVE-2020-2225 via org.jenkins-ci.plugins:matrix-project (>=1.0-beta-1, <=1.14)
org.jenkins-ci.plugins:matrix-project MAVEN version =1.0-beta-1, =1.0.5.0, =0.2, =1.0.0, =1.9.2-beta, =0.5, =1.29, =1.14.0-alpha-1, =4.1.1, =1.1.1, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.8.2 and more Source cves: CVE-2020-2225 Source advisory: GHSA-W43X-5F8F-686P...
org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2020-2220 via org.jenkins-ci.main:jenkins-core (1.559)
org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...
org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2020-2221 via org.jenkins-ci.main:jenkins-core (1.559)
org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...
org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2020-2223 via org.jenkins-ci.main:jenkins-core (1.559)
org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +186 more potentially affected by CVE-2020-2224 via org.jenkins-ci.plugins:matrix-project (>=1.0-beta-1, <=1.14)
org.jenkins-ci.plugins:matrix-project MAVEN version =1.0-beta-1, =1.0.5.0, =0.2, =1.0.0, =1.9.2-beta, =0.5, =1.29, =1.14.0-alpha-1, =4.1.1, =1.1.1, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.8.2 and more Source cves: CVE-2020-2224 Source advisory: GHSA-H6QC-455M-7V6V...
aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +186 more potentially affected by CVE-2020-2224 via org.jenkins-ci.plugins:matrix-project (>=1.0-beta-1, <=1.14)
org.jenkins-ci.plugins:matrix-project MAVEN version =1.0-beta-1, =1.0.5.0, =0.2, =1.0.0, =1.9.2-beta, =0.5, =1.29, =1.14.0-alpha-1, =4.1.1, =1.1.1, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.8.2 and more Source cves: CVE-2020-2224 Source advisory: OSV:GHSA-H6QC-455M-7V6V...
Stored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project Plugin
Matrix Project Plugin 1.16 and earlier does not escape node names shown in tooltips on the overview page of builds with a single axis. This results in a stored cross-site scripting XSS vulnerability exploitable by users with Agent/Configure permission. Matrix Project Plugin 1.17 escapes the node...
org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2020-2220 via org.jenkins-ci.main:jenkins-core (1.561)
org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...
GHSA-H6QC-455M-7V6V Stored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project Plugin
Matrix Project Plugin 1.16 and earlier does not escape node names shown in tooltips on the overview page of builds with a single axis. This results in a stored cross-site scripting XSS vulnerability exploitable by users with Agent/Configure permission. Matrix Project Plugin 1.17 escapes the node...
org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2020-2223 via org.jenkins-ci.main:jenkins-core (1.561)
org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...
org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2020-2160 via org.jenkins-ci.main:jenkins-core (1.561)
org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...
org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2020-2162 via org.jenkins-ci.main:jenkins-core (1.561)
org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...
org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2020-2163 via org.jenkins-ci.main:jenkins-core (1.561)
org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...
org.jenkins-ci.main:jenkins-test-harness (1.559), org.jenkins-ci.main:jenkins-war (1.559) +2 more potentially affected by CVE-2020-2161 via org.jenkins-ci.main:jenkins-core (1.559)
org.jenkins-ci.main:jenkins-core MAVEN version 1.559 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.559 - org.jenkins-ci.main:jenkins-war 1.559 -...