net.hurstfrost.jenkins:avatar (>=1.1, <=1.2), org.jenkins-ci.main:jenkins-test-harness (1.434) +11 more potentially affected by CVE-2022-34174 via org.jenkins-ci.main:jenkins-core (1.434)

org.jenkins-ci.main:jenkins-core MAVEN version 1.434 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.hurstfrost.jenkins:avatar =1.1, =0.2.0, =0.5, =1.0 - org.jvnet.hudson.plugins:sitemonitor 0...

org.jenkins-ci.main:jenkins-test-harness (1.429), org.jenkins-ci.main:jenkins-war (1.429) +8 more potentially affected by CVE-2022-34174 via org.jenkins-ci.main:jenkins-core (1.429)

org.jenkins-ci.main:jenkins-core MAVEN version 1.429 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.429 - org.jenkins-ci.main:jenkins-war 1.429 -...

customhistory:customhistory (>=1.1, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.471) +6 more potentially affected by CVE-2022-34174 via org.jenkins-ci.main:jenkins-core (1.471)

org.jenkins-ci.main:jenkins-core MAVEN version 1.471 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - customhistory:customhistory =1.1, =1.3 - org.jenkins-ci.main:jenkins-test-harness 1.471 -...

org.jenkins-ci.main:jenkins-test-harness (1.443), org.jenkins-ci.main:jenkins-war (1.443) +4 more potentially affected by CVE-2022-34174 via org.jenkins-ci.main:jenkins-core (1.443)

org.jenkins-ci.main:jenkins-core MAVEN version 1.443 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.443 - org.jenkins-ci.main:jenkins-war 1.443 -...

org.jenkins-ci.main:jenkins-test-harness (1.412), org.jenkins-ci.main:jenkins-war (1.412) +5 more potentially affected by CVE-2022-34174 via org.jenkins-ci.main:jenkins-core (1.412)

org.jenkins-ci.main:jenkins-core MAVEN version 1.412 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.412 - org.jenkins-ci.main:jenkins-war 1.412 -...

org.jenkins-ci.main:jenkins-test-harness (1.501), org.jenkins-ci.main:jenkins-war (1.501) +5 more potentially affected by CVE-2022-34174 via org.jenkins-ci.main:jenkins-core (1.501)

org.jenkins-ci.main:jenkins-core MAVEN version 1.501 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.501 - org.jenkins-ci.main:jenkins-war 1.501 -...

org.jenkins-ci.main:jenkins-test-harness (1.435), org.jenkins-ci.main:jenkins-war (1.435) +3 more potentially affected by CVE-2022-34171 via org.jenkins-ci.main:jenkins-core (1.435)

org.jenkins-ci.main:jenkins-core MAVEN version 1.435 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.435 - org.jenkins-ci.main:jenkins-war 1.435 -...

org.jenkins-ci.main:jenkins-test-harness (1.523), org.jenkins-ci.main:jenkins-war (1.523) +6 more potentially affected by CVE-2022-34174 via org.jenkins-ci.main:jenkins-core (1.523)

org.jenkins-ci.main:jenkins-core MAVEN version 1.523 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.523 - org.jenkins-ci.main:jenkins-war 1.523 -...

CVE-2022-34190

Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.1 and earlier does not escape the name and description of List maven artifact versions parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure...

io.undertow:undertow-servlet (1.0.14.final), io.undertow:undertow-websockets-jsr (1.0.14.final) +1 more potentially affected by CVE-2021-3629 via io.undertow:undertow-core (1.0.14.final)

io.undertow:undertow-core MAVEN version 1.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.14.final - io.undertow:undertow-websockets-jsr 1.0.14.final -...

io.undertow:undertow-servlet (1.0.14.final), io.undertow:undertow-websockets-jsr (1.0.14.final) +1 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.0.14.final)

io.undertow:undertow-core MAVEN version 1.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.14.final - io.undertow:undertow-websockets-jsr 1.0.14.final -...

org.jenkins-ci.main:jenkins-test-harness (1.462), org.jenkins-ci.main:jenkins-war (1.462) +6 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.462)

org.jenkins-ci.main:jenkins-core MAVEN version 1.462 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.462 - org.jenkins-ci.main:jenkins-war 1.462 -...

org.jenkins-ci.main:jenkins-test-harness (1.508), org.jenkins-ci.main:jenkins-war (1.508) +3 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.508)

org.jenkins-ci.main:jenkins-core MAVEN version 1.508 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.508 - org.jenkins-ci.main:jenkins-war 1.508 -...

org.jenkins-ci.main:jenkins-test-harness (1.530), org.jenkins-ci.main:jenkins-war (1.530) +3 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.530)

org.jenkins-ci.main:jenkins-core MAVEN version 1.530 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.530 - org.jenkins-ci.main:jenkins-war 1.530 -...

org.jenkins-ci.main:jenkins-test-harness (1.512), org.jenkins-ci.main:jenkins-war (1.512) +4 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.512)

org.jenkins-ci.main:jenkins-core MAVEN version 1.512 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.512 - org.jenkins-ci.main:jenkins-war 1.512 -...

org.jenkins-ci.main:jenkins-test-harness (1.476), org.jenkins-ci.main:jenkins-war (1.476) +4 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.476)

org.jenkins-ci.main:jenkins-core MAVEN version 1.476 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.476 - org.jenkins-ci.main:jenkins-war 1.476 -...

org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.1.0, <=1.1.3), org.jenkins-ci.main:jenkins-test-harness (1.506) +4 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.506)

org.jenkins-ci.main:jenkins-core MAVEN version 1.506 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.1.0, =1.1.3 -...

com.groupon.jenkins-ci.plugins:dotci (>=1.0.0, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.502) +5 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.502)

org.jenkins-ci.main:jenkins-core MAVEN version 1.502 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.0.0, =0.0.1, =0.0.7 - org.jenkins-ci.plugins:plugin 1.5...

org.jenkins-ci.main:jenkins-war (1.509.3.jenkins-14362-jzlib), org.jenkins-ci.main:maven-plugin (1.509.3.jenkins-14362-jzlib) potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.509.3.jenkins-14362-jzlib)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.3.jenkins-14362-jzlib is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.509.3.jenkins-14362-jzlib -...