Crx Content Package Deployer Security Vulnerabilities and Issues — Crx Content Package Deployer CVE List

Lucene search

JenkinsCrx Content Package Deployer

4 matches found

CVE•added 2022/06/23 5:15 p.m.•94 views

CVE-2022-34184

Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

5.4CVSS5.2AI score0.31598EPSS

CVE•added 2019/10/16 2:15 p.m.•62 views

CVE-2019-10439

A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

4.3CVSS4.4AI score0.00031EPSS

CVE•added 2019/10/16 2:15 p.m.•61 views

CVE-2019-10438

A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

6.5CVSS6.3AI score0.00048EPSS

CVE•added 2019/10/16 2:15 p.m.•56 views

CVE-2019-10437

A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

8.8CVSS8.5AI score0.00093EPSS