org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (1.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (1.0) +2 more potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (1.14)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-durable-task-step and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1-beta-1) potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (1.14.1-beta-1)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version 1.14.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-durable-task-step and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1) potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (1.14.1)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-durable-task-step and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.2), org.jvnet.hudson.plugins:analysis-test (1.20) potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (1.14.2)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-durable-task-step and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1) potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (1.15-beta-1)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-durable-task-step and may be impacted: -...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (1.15)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-durable-task-step and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0,...

com.testinium.jenkins:testinium (1.0), io.fabric8.jenkins.plugins:openshift-sync (>=0.1.18, <=1.0.42) +39 more potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (>=2.0, <=2.14)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version =2.0, =0.1.18, =1.0-alpha-2, =1.0-alpha-2, =1.0-alpha-2, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-1, =1.0-alpha-2, =2.2.0, =0.4, =0.9, =0.12 and more Source cves: CVE-2018-1000015 Source advisory:...

com.testinium.jenkins:testinium (1.0), io.fabric8.jenkins.plugins:openshift-sync (>=0.1.18, <=1.0.42) +39 more potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (>=2.0, <=2.14)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version =2.0, =0.1.18, =1.0-alpha-2, =1.0-alpha-2, =1.0-alpha-2, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-1, =1.0-alpha-2, =2.2.0, =0.4, =0.9, =0.12 and more Source cves: CVE-2018-1000015 Source advisory:...

PT-2022-8651

Name of the Vulnerable Software and Affected Versions MicroStrategy Web SDK versions 11.1 and earlier Description A Server-Side Request Forgery SSRF issue exists, allowing remote unauthenticated attackers to conduct an SSRF attack via the srcURL parameter to the "shortURL" task. Recommendations F...

CVE-2020-22985

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task...

CVE-2020-22986

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the searchString parameter to the wikiScrapper task...

Cross site scripting

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the fileToUpload parameter to the uploadFile task...

CVE-2020-22986

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the searchString parameter to the wikiScrapper task...

PT-2022-8654

Name of the Vulnerable Software and Affected Versions MicroStrategy Web SDK versions 10.11 and earlier Description The issue allows remote unauthenticated attackers to execute arbitrary code via the searchString parameter to the wikiScrapper task. This is a Cross-Site Scripting XSS issue...

PT-2022-8655

Name of the Vulnerable Software and Affected Versions MicroStrategy Web SDK versions 10.11 and earlier Description The issue allows remote unauthenticated attackers to execute arbitrary code. This is achieved via the fileToUpload parameter to the uploadFile task. Recommendations For MicroStrategy...

This Week in Spring - May 10th, 2022

Hi, Spring fans! Im writing this from - I cant believe I get to say this - abroad! Im in London, UK! Now, this is not particularly noteworthy for those millions who already live here. But I dont live here. Im a visitor! I live in San Francisco. I had to fly here! On a plane! With other people!...

CVE-2021-43712

Stored XSS in Add New Employee Form in Sourcecodester Employee Daily Task Management System 1.0 Allows Remote Attacker to Inject/Store Arbitrary Code via the Name Field...

Cross site scripting

Stored XSS in Add New Employee Form in Sourcecodester Employee Daily Task Management System 1.0 Allows Remote Attacker to Inject/Store Arbitrary Code via the Name Field...

CVE-2021-43712

CVE-2021-43712 corresponds to a Stored XSS vulnerability in Sourcecodester’s Employee Daily Task Management System v1.0, occurring in the Add New Employee Form Name field. The incident is described across multiple sources as enabling a remote attacker to inject/store arbitrary code via the Name f...

CVE-2021-43712: Improper Neutralization of Input During Web Page Generation

Stored XSS in Add New Employee Form in Sourcecodester Employee Daily Task Management System 1.0 Allows Remote Attacker to Inject/Store Arbitrary Code via the Name Field...