org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.3, <=2.4), org.jenkins-ci.plugins:github-organization-folder (>=1.5, <=1.6) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.14)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps-global-lib =2.3, =1.5, =1.6...

au.com.versent.jenkins.plugins:ignore-committer-strategy (29.v7c3891a_434c3), com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3837.v305192405b_c0)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3837.v305192405bc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - au.com.versent.jenkins.plugins:ignore-committer-strategy...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11) +9 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.3.0, =1.1.0, =1.1,...

io.jenkins.plugins:pipeline-graph-view (>=381.v22c607350419, <=419.v946ff4a_49e1c), org.jenkins-ci.plugins:meliora-testlab (>=1.23, <=1.24) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3975.v567e2a_1ffa_22)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3975.v567e2a1ffa22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-graph-view =381.v22c607350419,...

org.jenkins-ci.plugins:gradle (>=2.14, <=2.15) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3964.v0767b_4b_a_0b_fa)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3964.v0767b4ba0bfa is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:gradle =2.14, =2.15 Source cves:...

Rebuilding a run with revoked script approval allowed by workflow-cps

workflow-cps 3990.vd281dd77a388 and earlier, except 3975.3977.v478dd9e956c3, does not check whether the main Jenkinsfile script for a rebuilt build is approved. This allows attackers with Item/Build permission to rebuild a previous build whose Jenkinsfile script is no longer approved. NOTE: This...

net.masterthought.jenkins:cucumber-reports (>=1.3.0, <=2.5.1), org.jenkins-ci.main:jenkins-test-harness (1.577) +21 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.577)

org.jenkins-ci.main:jenkins-core MAVEN version 1.577 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.masterthought.jenkins:cucumber-reports =1.3.0, =2.5.1 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (1.3), com.nirima.jenkins.repository:pom (1.3) +39 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.609.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.609.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin 1.3 - com.nirima.jenkins.repository:pom 1....

org.jenkins-ci.plugins.workflow:workflow-cps (>=3697.3699.v9cfca_8c0db_0c, <=3774.v4a_d648d409ce), org.jenkins-ci.plugins:command-launcher (>=100.102.v60240195db_50, <=107.v773860566e2e) potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1265.va_fb_290b_4b_d34)

org.jenkins-ci.plugins:script-security MAVEN version 1265.vafb290b4bd34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =3697.3699.v9cfca8c0db0c,...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +13 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.23)

org.jenkins-ci.plugins:script-security MAVEN version 1.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...

com.lookout.jenkins:environment-script (100.v3a_f1a_6a_b_7549), com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer (>=2.4.2, <=2.5.2) +38 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1229.v4880b_b_e905a_6)

org.jenkins-ci.plugins:script-security MAVEN version 1229.v4880bbe905a6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.lookout.jenkins:environment-script 100.v3af1a6ab7549 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=1.1, <=1.2), org.jenkins-ci.plugins.workflow:workflow-cps (>=1.1, <=1.2) +1 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.12)

org.jenkins-ci.plugins:script-security MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =1.1, =1.1, =1.1, =1.2 Source...

org.biouno:uno-choice (>=2.0, <=2.1), org.jenkins-ci.plugins.workflow:workflow-cps (2.39) +2 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.31)

org.jenkins-ci.plugins:script-security MAVEN version 1.31 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice =2.0, =1.1.2, =1.14, =1.16 Source cves: CVE-2024-34144 Source...

io.jenkins.plugins:tricentis-ci (>=1.0, <=1.3), org.jenkins-ci.plugins.workflow:workflow-cps (>=2.37, <=2.38) +3 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.30)

org.jenkins-ci.plugins:script-security MAVEN version 1.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:tricentis-ci =1.0, =2.37, =1.22-beta-1, =1.10, =1.5, =1.6 Source...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-1, <=0.1-beta-4) +1 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.4)

org.jenkins-ci.plugins:script-security MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=0.1-beta-5, <=0.1-beta-7) +1 more potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.4)

org.jenkins-ci.plugins:git-server MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5, =0.1-beta-7 -...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:openshift-k8s-credentials (>=168.v79a_983191991, <=276.v708b_2cd34a_9e) +7 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1313.v7a_6067dc7087)

org.jenkins-ci.plugins:script-security MAVEN version 1313.v7a6067dc7087 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798...