Config File Provider Security Vulnerabilities and Issues — Config File Provider CVE List

Lucene search

JenkinsConfig File Provider

2 matches found

CVE•added 2021/04/21 3:15 p.m.•148 views

CVE-2021-21645

Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs.

4.3CVSS4.6AI score0.00118EPSS

CVE•added 2019/02/06 4:29 p.m.•65 views

CVE-2019-1003014

An cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.4.1 and earlier in src/main/resources/lib/configfiles/configfiles.jelly that allows attackers with permission to define shared configuration files to execute arbitrary JavaScript when a user attempts to delete the...

4.8CVSS4.9AI score0.00067EPSS