Security Advisories | GitStock

medium2022-06-24

CVE-2022-34180-Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement

jenkinsci/embeddable-build-status-plugin · GHSA-xxhf-xq6v-c8mj

low2022-06-24

CVE-2022-34202-User passwords stored in plain text by Jenkins EasyQA Plugin

jenkinsci/easyqa-plugin · GHSA-xcp5-j5fj-3xp6

high2022-06-24

CVE-2022-34187-Cross-site Scripting in Jenkins Filesystem List Parameter Plugin

jenkinsci/filesystem-list-parameter-plugin · GHSA-x95w-qf3m-pqpx

high2022-06-24

CVE-2022-34191-Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin

jenkinsci/cavisson-ns-nd-integration-plugin · GHSA-pv38-mqpp-v72h

high2022-06-24

CVE-2022-34196-Cross-site Scripting in Jenkins REST List Parameter Plugin

jenkinsci/rest-list-parameter-plugin · GHSA-pc9c-547w-hhmc

high2022-06-24

CVE-2022-34175-Unauthorized view fragment access in Jenkins

jenkinsci/jenkins · GHSA-p3rc-946h-8cf5

high2022-06-24

CVE-2022-34172-Cross-site Scripting vulnerability in Jenkins

jenkinsci/jenkins · GHSA-mhp7-3393-pfqr

high2022-06-24

CVE-2022-34188-Cross-site Scripting in Jenkins Hidden Parameter Plugin

jenkinsci/hidden-parameter-plugin · GHSA-jhfv-8936-g652

high2022-06-24

CVE-2022-34184-Cross-site Scripting in Jenkins CRX Content Package Deployer Plugin

jenkinsci/crx-content-package-deployer-plugin · GHSA-hc44-p2qq-cfm9

high2022-06-24

CVE-2022-34182-Reflected Cross-site Scripting in Jenkins Nested View Plugin

jenkinsci/nested-view-plugin · GHSA-h642-5h74-3x9c

high2022-06-24

CVE-2022-34193-Cross-site Scripting in Jenkins Package Version Plugin

jenkinsci/packageversion-plugin · GHSA-gpw4-7mcw-m8vx

medium2022-06-24

CVE-2022-34203-Cross-Site Request Forgery in Jenkins EasyQA Plugin

jenkinsci/easyqa-plugin · GHSA-g67p-jvvc-qf54

high2022-06-24

CVE-2022-34194-Cross-site Scripting in Jenkins Readonly Parameter Plugin

jenkinsci/readonly-parameter-plugin · GHSA-fcqr-gh8w-wm8f

high2022-06-24

CVE-2022-34197-Cross-site Scripting in Jenkins Sauce OnDemand Plugin

jenkinsci/sauce-ondemand-plugin · GHSA-cqhr-q835-62gm

medium2022-06-24

CVE-2022-34199-Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin

jenkinsci/convertigo-mobile-platform-plugin · GHSA-c8mf-mc3f-2wvc

medium2022-06-24

CVE-2022-34174-Observable timing discrepancy allows determining username validity in Jenkins

jenkinsci/jenkins · GHSA-9grj-j43m-mjqr

medium2022-06-24

CVE-2022-34179-Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin

jenkinsci/embeddable-build-status-plugin · GHSA-93mx-2vf9-28c4

high2022-06-24

CVE-2022-34171-Cross-site Scripting vulnerability in Jenkins

jenkinsci/jenkins · GHSA-7f84-p6r5-jr6q

high2022-06-24

CVE-2022-34186-Cross-site Scripting in Jenkins Dynamic Extended Choice Parameter Plugin

jenkinsci/dynamic-extended-choice-parameter-plugin · GHSA-7558-6q45-6x7m

medium2022-06-24

CVE-2022-34201-Missing permission check in Jenkins Convertigo Mobile Platform Plugin

jenkinsci/convertigo-mobile-platform-plugin · GHSA-7495-24mx-hph2