CVE-2019-1003042

CVE-2019-1003042 corresponds to a cross-site scripting vulnerability in Jenkins Lockable Resources Plugin (version 2.4 and earlier), where an attacker who can control resource names can inject arbitrary JavaScript into web pages rendered by the plugin. The issue is evidenced in multiple connected...

CVE-2020-2281

The CVE-2020-2281 issue affects Jenkins Lockable Resources Plugin versions 2.8 and earlier. The root cause is CSRF due to endpoints not requiring POST, allowing attackers to reserve, unreserve, unlock, and reset resources. Impact is limited to the affected plugin’s resources as described in the s...