org.jenkins-ci.plugins:radiatorviewplugin (>=1.28, <=1.29), org.jenkins-ci.plugins:security-inspector (0.3) potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.13)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:radiatorviewplugin =1.28, =1.29 -...

org.jenkins-ci.plugins:radiatorviewplugin (>=1.28, <=1.29), org.jenkins-ci.plugins:security-inspector (0.3) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.13)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:radiatorviewplugin =1.28, =1.29 -...

org.jenkins-ci.plugins:radiatorviewplugin (>=1.28, <=1.29), org.jenkins-ci.plugins:security-inspector (0.3) potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.13)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:radiatorviewplugin =1.28, =1.29 -...

Stored XSS vulnerability in radiatorviewplugin

radiatorviewplugin 1.29 and earlier does not escape the full name of the jobs in tooltips. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. As of publication of this advisory, there is no fix...