jenkins-plugin/workflow-support: Stored XSS vulnerability in Pipeline: Supporting APIs Plugin

A Cross-site scripting XSS vulnerability was found in a Jenkins plugin. This issue may allow an authenticated remote attacker to create Pipelines...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps (1.11-beta-1) +3 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.11-beta-1)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.11-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.6-alpha-1), org.jenkins-ci.plugins.workflow:workflow-cps (1.6-alpha-1) +2 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.6-alpha-1)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.6-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-2), org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-2) +2 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (0.1-beta-2)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 0.1-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-2), org.jenkins-ci.plugins.workflow:workflow-cps (1.11-beta-2) +2 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.11-beta-2)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.11-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

com.synopsys.jenkinsci:ownership (>=0.9.0-beta-1, <=0.13.0), hudson.plugins.sloccount:sloccount (>=1.22, <=1.25) +14 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.14)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - com.synopsys.jenkinsci:ownership =0.9.0-beta-1, =1.22, =2.2, =1....

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4), org.jenkins-ci.plugins.workflow:workflow-cps (1.4) +4 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.4)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-4) +1 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (0.1-beta-4)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 0.1-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11) +12 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.11)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.3.0, =1.1.0...

org.jenkins-ci.plugins:applitools-eyes (>=1.14, <=1.15.1) potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (3.8)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins:applitools-eyes =1.14, =1.15.1 Source cves...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.8), org.jenkins-ci.plugins.workflow:workflow-cps (1.8) +3 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.8)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.8 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.2), org.jenkins-ci.plugins.workflow:workflow-cps (1.4.2) +2 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.4.2)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-8), org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-8) +2 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (0.1-beta-8)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 0.1-beta-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

hudson.plugins.octopusdeploy:octopusdeploy (4.0.2), io.jenkins.plugins:zohosprints (>=1.0, <=1.1.4) +1 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (3.3)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - hudson.plugins.octopusdeploy:octopusdeploy 4.0.2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-6), org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-6) +2 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (0.1-beta-6)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 0.1-beta-6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (2.20)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 2.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.waveywaves.jenkins.plugins:tekton-client 1.1.0 Source cves:...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.3-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps (1.4.3-beta-1) +2 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.4.3-beta-1)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.4.3-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.2), org.jenkins-ci.plugins.workflow:workflow-cps (1.14.2) +5 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.14.2)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10.1), org.jenkins-ci.plugins.workflow:workflow-cps (1.10.1) +2 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.10.1)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.10.1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.3), org.jenkins-ci.plugins.workflow:workflow-cps (1.3) +2 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (1.3)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.3 -...