io.jenkins.plugins:autograding (>=4.0.0, <=4.1.0) potentially affected by CVE-2023-46651 via io.jenkins.plugins:warnings-ng (10.5.0)

io.jenkins.plugins:warnings-ng MAVEN version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:warnings-ng and may be impacted: - io.jenkins.plugins:autograding =4.0.0, =4.1.0 Source cves: CVE-2023-46651 Source advisory:...

GHSA-66HV-FHCM-7XM7 Jenkins Warnings Plugin exposures system-scoped credentials

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing the use of system-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to access and capture credentials they are no...

io.jenkins.plugins:synopsys-sigma (>=2021.12.0, <=2022.1.0) potentially affected by CVE-2023-46651 via io.jenkins.plugins:warnings-ng (9.4.0)

io.jenkins.plugins:warnings-ng MAVEN version 9.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:warnings-ng and may be impacted: - io.jenkins.plugins:synopsys-sigma =2021.12.0, =2022.1.0 Source cves: CVE-2023-46651 Source advisory...

io.jenkins.plugins:autograding (>=4.0.0, <=4.1.0) potentially affected by CVE-2023-46651 via io.jenkins.plugins:warnings-ng (10.5.0)

io.jenkins.plugins:warnings-ng MAVEN version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:warnings-ng and may be impacted: - io.jenkins.plugins:autograding =4.0.0, =4.1.0 Source cves: CVE-2023-46651 Source advisory:...

CVE-2023-5727

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 119,...

CVE-2023-46651

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

CVE-2023-46651

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

Design/Logic Flaw

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

CVE-2023-46651

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

CVE-2023-46651

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

io.jenkins.plugins:autograding (>=4.0.0, <=4.1.0) potentially affected by CVE-2023-46651 via io.jenkins.plugins:warnings-ng (10.5.0)

io.jenkins.plugins:warnings-ng MAVEN version 10.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:warnings-ng and may be impacted: - io.jenkins.plugins:autograding =4.0.0, =4.1.0 Source cves: CVE-2023-46651 Source advisory:...

CVE-2023-46651

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

CVE-2023-46651

Affected software: Jenkins Warnings Plugin, version 10.5.0 and earlier (backport fix to 10.4.1). Vulnerability: The plugin does not set the appropriate context for credentials lookup, allowing users with Item/Configure permission to access credentials they are not entitled to. Impact: Potential u...

CVE-2023-46651

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

CVE-2023-46651: Insufficiently Protected Credentials

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

Jenkins Plugin Warnings Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

PT-2023-6484 · Jenkins · Jenkins Warnings Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Warnings Plugin versions 10.5.0 and earlier Description: The issue is related to information disclosure, allowing remote attackers to gain unauthorized access to protected information. Specifically, it does not set the appropriate...

Exposure of system-scoped credentials in warnings-ng

warnings-ng 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing the use of system-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to access and capture credentials they are not entitled t...

Mozilla Thunderbird < 115.4.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-47 advisory. - Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bug...

GHSA-CGX2-RRMR-JX43 Apache Airflow vulnerable to sensitive information exposure when users list warnings for all DAGs

Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAGs. It would reveal the dagids and the stack-traces of import errors for those DAGs with import...