org.jenkins-ci.main:jenkins-test-harness (1.504), org.jenkins-ci.main:jenkins-war (1.504) +6 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.504)

org.jenkins-ci.main:jenkins-core MAVEN version 1.504 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.504 - org.jenkins-ci.main:jenkins-war 1.504 -...

org.jenkins-ci.main:jenkins-test-harness (1.504), org.jenkins-ci.main:jenkins-war (1.504) +6 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.504)

org.jenkins-ci.main:jenkins-core MAVEN version 1.504 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.504 - org.jenkins-ci.main:jenkins-war 1.504 -...

org.jenkins-ci.main:jenkins-test-harness (1.504), org.jenkins-ci.main:jenkins-war (1.504) +6 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.504)

org.jenkins-ci.main:jenkins-core MAVEN version 1.504 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.504 - org.jenkins-ci.main:jenkins-war 1.504 -...

EUVD-2022-3714

Malicious code in bioql PyPI...

org.jenkins-ci.main:jenkins-test-harness (1.504), org.jenkins-ci.main:jenkins-war (1.504) +6 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.504)

org.jenkins-ci.main:jenkins-core MAVEN version 1.504 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.504 - org.jenkins-ci.main:jenkins-war 1.504 -...

org.jenkins-ci.main:jenkins-test-harness (1.504), org.jenkins-ci.main:jenkins-war (1.504) +6 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.504)

org.jenkins-ci.main:jenkins-core MAVEN version 1.504 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.504 - org.jenkins-ci.main:jenkins-war 1.504 -...

CVE-2020-2201

Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site scripting vulnerability...

org.jenkins-ci.main:jenkins-test-harness (1.504), org.jenkins-ci.main:jenkins-war (1.504) +6 more potentially affected by CVE-2025-31721 via org.jenkins-ci.main:jenkins-core (1.504)

org.jenkins-ci.main:jenkins-core MAVEN version 1.504 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.504 - org.jenkins-ci.main:jenkins-war 1.504 -...

org.jenkins-ci.main:jenkins-test-harness (1.504), org.jenkins-ci.main:jenkins-war (1.504) +6 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.504)

org.jenkins-ci.main:jenkins-core MAVEN version 1.504 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.504 - org.jenkins-ci.main:jenkins-war 1.504 -...

CVE-2023-35145

A flaw was found in the Jenkins Sonargraph Integration Plugin, where it is vulnerable to Cross-site scripting caused by the improper validation of user-supplied input. This flaw allows a remote, authenticated attacker to inject malicious script into a Web page, which would be executed in a victim...

Cross-site Scripting (XSS)

Sonargraph Integration Jenkins Plugin is vulnerable to Cross-site Scripting XSS. The vulnerability exists in doCheckLogFile function in SonargraphReportBuilder.java because it fails to escape the file path and the project name for the Log file field form validation which allows an attacker to...

Jenkins plugins Multiple Vulnerabilities (2023-06-14)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default. CVE-2023-3514...

GHSA-WMXX-2PVR-X7J6 Jenkins Sonargraph Integration Plugin vulnerable to Stored Cross-site Scripting

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not correctly escape the file path and the project name for the Log file field form validation. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Jenkins Sonargraph Integration Plugin vulnerable to Stored Cross-site Scripting

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not correctly escape the file path and the project name for the Log file field form validation. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2023-35145

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in a stored cross-site scripting vulnerability exploitable by attackers with Item/Configure permission...

CVE-2023-35145

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in a stored cross-site scripting vulnerability exploitable by attackers with Item/Configure permission...

CVE-2023-35145

Summary of CVE-2023-35145 (Jenkins Sonargraph Integration Plugin) Affected: Jenkins Sonargraph Integration Plugin 5.0.1 and earlier. Issue: The plugin does not escape the file path and the project name in the Log file field form validation, leading to a stored cross-site scripting (XSS) vulnerabi...

CVE-2023-35145

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in a stored cross-site scripting vulnerability exploitable by attackers with Item/Configure permission...

CVE-2023-35145

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in a stored cross-site scripting vulnerability exploitable by attackers with Item/Configure permission...

CVE-2023-35145

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in a stored cross-site scripting vulnerability exploitable by attackers with Item/Configure permission...