io.jenkins.blueocean:blueocean (1.1.0-beta-1), io.jenkins.blueocean:blueocean-events (1.1.0-beta-1) +4 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.9)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - io.jenkins.blueocean:blueocean 1.1.0-beta-1 - io.jenkins.blueocean:blueocean-events...

io.jenkins.blueocean:blueocean (1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (1.2.0-beta-1) +7 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.11)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - io.jenkins.blueocean:blueocean 1.2.0-beta-1 - io.jenkins.blueocean:blueocean-events...

nz.co.jammehcow:discord-notifier (>=v1.4.8, <=1.4.7), org.jenkins-ci.plugins:build-name-setter (>=1.7.0, <=2.0.3) potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.13)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - nz.co.jammehcow:discord-notifier =v1.4.8, =1.7.0, =2.0.3 Source cves: CVE-2024-23900...

io.jenkins.plugins:synopsys-sigma (>=2021.12.0, <=2022.1.0) potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.18)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - io.jenkins.plugins:synopsys-sigma =2021.12.0, =2022.1.0 Source cves: CVE-2024-23900...

org.jenkins-ci.plugins:parallel-test-executor (>=410.vb_85a_6ea_6cc7c, <=418.v24f9a_141d726) potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (771.v574584b_39e60)

org.jenkins-ci.plugins:matrix-project MAVEN version 771.v574584b39e60 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - org.jenkins-ci.plugins:parallel-test-executor =410.vb85a6ea6cc7c,...

org.jenkins-ci.plugins:claim (543.v0061de6b_dcb_d), org.jenkins-ci.plugins:copyartifact (722.v0662a_9b_e22a_c) +3 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (802.v8013b_40c7edc)

org.jenkins-ci.plugins:matrix-project MAVEN version 802.v8013b40c7edc is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - org.jenkins-ci.plugins:claim 543.v0061de6bdcbd -...

org.6wind.jenkins:lockable-resources (>=1210.v71f6e7c0e0b_5, <=1246.v28b_e4cc6fa_16), org.jenkins-ci.plugins:email-ext (>=2.103, <=2.105) +6 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (818.v7eb_e657db_924)

org.jenkins-ci.plugins:matrix-project MAVEN version 818.v7ebe657db924 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - org.6wind.jenkins:lockable-resources =1210.v71f6e7c0e0b5, =2.103, =1.33,...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (>=1.561, <=1.599) +1 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.0-beta-1)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =1.561, =1.599 -...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.1, <=2.36.2), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +10 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.2)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.1, =1.0.0, =1.0.1, =1.1.3, =1.1.0, =1.0.0,...

com.joelj.jenkins:ez-templates (1.0.5), org.jenkins-ci.plugins:azure-container-agents (>=0.3.0, <=0.4.1) +14 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.3)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - com.joelj.jenkins:ez-templates 1.0.5 - org.jenkins-ci.plugins:azure-container-agents...

com.cloudbees.jenkins.plugins:mansion-cloud (>=1.29, <=1.31), org.jenkins-ci.lib:xtrigger-lib (0.36) +12 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.4.1)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - com.cloudbees.jenkins.plugins:mansion-cloud =1.29, =1.596.1, =1.645, =0.4, =2.1, =1.2...

com.arkea.satd:xlrelease-var-setter (>=0.2, <=0.4), org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.3) +8 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.7)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - com.arkea.satd:xlrelease-var-setter =0.2, =1.3.0-alpha.1, =1.0, =1.93, =0.25, =1.0.1,...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +51 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.7.1)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - com.coravy.hudson.plugins.github:github =1.28.0, =y, =1.0.0-b12, =1.0.0-b13,...

io.jenkins.blueocean:blueocean (>=1.0.0-b23, <=1.0.1), io.jenkins.blueocean:blueocean-config (>=1.0.0-b23, <=1.0.1) +10 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.8)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b23, =1.0.0-b23, =1.0.0-b23, =1.0.0-b23,...

io.jenkins.blueocean:blueocean (>=1.1.0-beta-2, <=1.1.7), io.jenkins.blueocean:blueocean-events (>=1.1.0-beta-2, <=1.1.7) +6 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.10)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - io.jenkins.blueocean:blueocean =1.1.0-beta-2, =1.1.0-beta-2, =1.1.0-beta-2,...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.28, <=1.31) +3 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.12)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.6 -...

io.jenkins.plugins:zohosprints (>=1.0, <=1.1.4), org.jenkins-ci.plugins:build-name-setter (2.0.4) +2 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (1.14)

org.jenkins-ci.plugins:matrix-project MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - io.jenkins.plugins:zohosprints =1.0, =2.4, =2.0.0, =2.0.1 Source cves: CVE-2024-23900...

com.lookout.jenkins:environment-script (100.v3a_f1a_6a_b_7549), com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer (>=2.4.2, <=2.5.2) +17 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (789.v57a_725b_63c79)

org.jenkins-ci.plugins:matrix-project MAVEN version 789.v57a725b63c79 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - com.lookout.jenkins:environment-script 100.v3af1a6ab7549 -...

Path traversal vulnerability in Jenkins Matrix Project Plugin

Jenkins Matrix Project Plugin 822.v01b8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects submitted through the config.xml REST API endpoint. This allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins...

nz.co.jammehcow:discord-notifier (>=260.v8f28622b_a_6b_7, <=264.v70060b_a_b_d300), org.jenkins-ci.plugins:build-name-setter (>=2.4.1, <=2.4.3) +2 more potentially affected by CVE-2024-23900 via org.jenkins-ci.plugins:matrix-project (822.v01b_8c85d16d2)

org.jenkins-ci.plugins:matrix-project MAVEN version 822.v01b8c85d16d2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:matrix-project and may be impacted: - nz.co.jammehcow:discord-notifier =260.v8f28622ba6b7, =2.4.1,...