Security Advisories | GitStock

high2022-10-19

CVE-2022-43409-Stored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin

jenkinsci/workflow-support-plugin · GHSA-64r9-x74q-wxmh

low2022-10-19

CVE-2022-43412-Non-constant time webhook token comparison in Jenkins Generic Webhook Trigger Plugin

jenkinsci/generic-webhook-trigger-plugin · GHSA-2jxx-2x93-2q2f

medium2022-10-19

CVE-2022-43418-CSRF vulnerability in Jenkins Katalon Plugin allows capturing credentials

jenkinsci/katalon-plugin · GHSA-x8j7-vxh9-p67g

high2022-10-19

CVE-2022-43434-Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin

jenkinsci/neuvector-vulnerability-scanner-plugin · GHSA-wmfh-h3vm-rcxm

high2022-10-19

CVE-2022-43430-XXE vulnerability in Jenkins Compuware Topaz for Total Test Plugin

jenkinsci/compuware-topaz-for-total-test-plugin · GHSA-vhwv-8897-jm7q

low2022-10-19

CVE-2022-43426-AWS secrets displayed without masking by Jenkins S3 Explorer Plugin

jenkinsci/s3explorer-plugin · GHSA-mf4p-wjrm-cmjp

medium2022-10-19

CVE-2022-43410-Webhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin

jenkinsci/mercurial-plugin · GHSA-j7pg-863g-22p6

high2022-10-19

CVE-2022-43420-Stored XSS vulnerability in Jenkins Contrast Continuous Application Security Plugin

jenkinsci/contrast-continuous-application-security-plugin · GHSA-hvcr-927w-qcvq

high2022-10-19

CVE-2022-43435-Content-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine Plugin

jenkinsci/fireline-plugin · GHSA-7rrj-hqv6-fvpp

medium2022-10-19

CVE-2022-43417-Missing permission checks in Jenkins Katalon Plugin allow capturing credentials

jenkinsci/katalon-plugin · GHSA-5fvg-h778-jjjx

medium2022-10-19

CVE-2022-43419-API keys stored in plain text by Jenkins Katalon Plugin

jenkinsci/katalon-plugin · GHSA-35rx-7pc8-6963

medium2022-10-19

CVE-2022-43422-Agent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin

jenkinsci/compuware-topaz-utilities-plugin · GHSA-2x49-wj38-78q9

high2022-10-19

CVE-2022-43415-XXE vulnerability in Jenkins REPO Plugin

jenkinsci/repo-plugin · GHSA-2w2m-ccf8-57cq

high2022-10-19

CVE-2022-41709-Markdownify subject to Remote Code Execution via malicious markdown file

amitmerchant1990/electron-markdownify · GHSA-c942-mfmp-p4fh

high2022-10-19

CVE-2022-39326-run-terraform allows for RCE via terraform plan

kartverket/github-workflows · GHSA-f9qj-7gh3-mhj4

medium2022-10-19

CVE-2022-39272-Improper use of metav1.Duration allows for Denial of Service

fluxcd/flux2 · GHSA-f4p5-x4vc-mh4v

medium2022-10-19

CVE-2022-42115-Liferay Portal Vulnerable to XSS in the Object Module

liferay/liferay-portal · GHSA-x43w-xphx-86w3

medium2022-10-19

CVE-2022-42113-Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module

liferay/liferay-portal · GHSA-r32w-v775-5952

medium2022-10-19

CVE-2022-42117-Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module

liferay/liferay-portal · GHSA-g6r2-6x46-jpp6

medium2022-10-19

CVE-2022-42114-Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module

liferay/liferay-portal · GHSA-cmrw-cgfc-v6x2