Security Advisories | GitStock

medium2022-11-16

CVE-2022-45385-Lack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification Plugin

jenkinsci/dockerhub-notification-plugin · GHSA-v535-pc6r-77qh

high2022-11-16

CVE-2022-45387-Jenkins BART Plugin vulnerable to cross-site scripting (XSS)

jenkinsci/bart-plugin · GHSA-j923-26c2-qq9p

medium2022-11-16

CVE-2022-45394-Missing permission check in Jenkins Delete log Plugin

jenkinsci/delete-log-plugin · GHSA-j874-47xx-9xfg

medium2022-11-16

CVE-2022-45393-Cross-Site Request Forgery in Jenkins Delete log Plugin

jenkinsci/delete-log-plugin · GHSA-hw4f-g7wh-xp52

medium2022-11-16

CVE-2022-45396-XXE vulnerability on agents in Jenkins SourceMonitor Plugin

jenkinsci/sourcemonitor-plugin · GHSA-h4wx-78p9-fwxw

critical2022-11-16

CVE-2022-45395-XML External Entity Reference in Jenkins CCCC Plugin

jenkinsci/cccc-plugin · GHSA-f3gj-hvv4-f57v

high2022-11-16

CVE-2022-45401-Jenkins Associated Files Plugin vulnerable to cross-site scripting (XSS)

jenkinsci/associated-files-plugin · GHSA-chcg-gh9p-96c5

high2022-11-16

CVE-2022-45388-Jenkins Config Rotator Plugin vulnerable to path traversal

jenkinsci/config-rotator-plugin · GHSA-9pqq-h9qv-28fp

high2022-11-16

CVE-2022-45400-XXE vulnerability in Jenkins JAPEX Plugin

jenkinsci/japex-plugin · GHSA-8538-25v4-25pg

medium2022-11-16

CVE-2022-45386-XML External Entity Reference in Jenkins Violations Plugin

jenkinsci/violations-plugin · GHSA-4598-wcg8-x56g

medium2022-11-16

CVE-2022-45391-Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally

jenkinsci/cavisson-ns-nd-integration-plugin · GHSA-3vwm-fc87-mq6h

medium2022-11-16

CVE-2022-45398-Cross-Site Request Forgery in Jenkins Cluster Statistics Plugin

jenkinsci/cluster-stats-plugin · GHSA-24hp-84jp-8wgm

medium2022-11-16

CVE-2022-45383-Incorrect permission checks in Jenkins Support Core Plugin

jenkinsci/support-core-plugin · GHSA-w2j3-pq63-339w

medium2022-11-16

CVE-2022-38666-SSL/TLS certificate validation unconditionally disabled by Jenkins NS-ND Integration Performance Publisher Plugin

jenkinsci/cavisson-ns-nd-integration-plugin · GHSA-vj5r-mmp4-3hrx

medium2022-11-16

CVE-2022-45382-Cross-site Scripting in Jenkins Naginator Plugin

jenkinsci/naginator-plugin · GHSA-h8hf-hxx6-5g6v

high2022-11-16

CVE-2022-45379-Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions

jenkinsci/script-security-plugin · GHSA-fv42-mx39-6fpw

high2022-11-16

CVE-2022-45381-Arbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin

jenkinsci/pipeline-utility-steps-plugin · GHSA-3g9q-cmgv-g4p6

high2022-11-16

CVE-2022-45380-Jenkins JUnit Plugin subject to Cross-site Scripting via URL conversion

jenkinsci/junit-plugin · GHSA-298r-5c48-7q2r

medium2022-11-16

CVE-2021-4241-PHPServerMon PRNG has Insufficient Entropy

phpservermon/phpservermon · GHSA-hc4j-7mqg-cxjj

medium2022-11-16

CVE-2021-4240-Insufficient Entropy in PHPServerMon PRNG

phpservermon/phpservermon · GHSA-97w9-gcc7-vr8g