11 matches found
CVE-2019-10380
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code...
com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.4, <=0.4.1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11, <=1.14-beta-1) +3 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.1)
org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.4, =1.11, =1.0...
com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.4, <=0.4.1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11, <=1.14-beta-1) +3 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.1)
org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.4, =1.11, =1.0...
org.jenkins-ci.plugins:simple-travis-runner (>=1.0-alpha-1, <=1.0) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.13)
org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:simple-travis-runner =1.0-alpha-1...
org.jenkins-ci.plugins:simple-travis-runner (>=1.0-alpha-1, <=1.0) potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.13)
org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:simple-travis-runner =1.0-alpha-1...
com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.13) +4 more potentially affected by CVE-2022-25178 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.13)
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta,...
CVE-2019-10380
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code...
Code injection
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code...
CVE-2019-10380
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code...
CVE-2019-10380
Summary: CVE-2019-10380 affects Jenkins Simple Travis Pipeline Runner Plugin (versions 1.0 and earlier). The root cause is unsafe values in the plugin’s custom Script Security whitelist, enabling attackers able to execute Script Security protected scripts to run arbitrary code on vulnerable Jenki...
CVE-2019-10380: Undefined Security Weakness
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code...