57 matches found
CVE-2023-24452: Cross-Site Request Forgery (CSRF)
A cross-site request forgery CSRF vulnerability in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password...
Jenkins Jira Issue Updater Plugin stores credentials in plain text
Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...
WordPress updater plugin cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress updater plugin. An attacker can exploit this...
CloudBees Jenkins Jira Issue Updater Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Jira Issue Updater Plugin is used in one of t...
CVE-2017-18565
The updater plugin before 1.35 for WordPress has multiple XSS issues...
CVE-2017-18565
The updater plugin before 1.35 for WordPress has multiple XSS issues...
Cross site scripting
The updater plugin before 1.35 for WordPress has multiple XSS issues...
CVE-2017-18565
The CVE-2017-18565 issue affects the WordPress updater plugin by BestWebSoft up to version 1.35. The connected Nuclei template and related references confirm multiple Cross-Site Scripting (XSS) flaws in the updater plugin before 1.35, enabling an attacker with authenticated access to inject and e...
CVE-2017-18565
The updater plugin before 1.35 for WordPress has multiple XSS issues...
CVE-2017-18565: Improper Neutralization of Input During Web Page Generation
The updater plugin before 1.35 for WordPress has multiple XSS issues...
PT-2019-8499
Name of the Vulnerable Software and Affected Versions WordPress updater plugin versions prior to 1.35 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 1.35, update the updater plugin to version 1.35 or later to resolve the issue...
CVE-2019-1003054
Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2019-1003054
Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2019-1003054
Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2019-1003054
Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2019-1003054
CVE-2019-1003054 relates to the Jenkins Jira Issue Updater Plugin, where credentials are stored unencrypted in job config.xml on the Jenkins master/controller. The vulnerability arises from credentials being accessible to any user with Extended Read permission or with access to the master/control...
CVE-2019-1003054: Missing Encryption of Sensitive Data
Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...