Security Advisories | GitStock

high2022-03-31

CVE-2022-23793-Path Traversal within joomla/archive tar class

joomla-framework/archive · GHSA-jm67-jh3g-cg3f

medium2022-03-31

CVE-2022-23794-Path Disclosure within joomla/filesystem class

joomla-framework/filesystem · GHSA-rc8q-45v8-x6xc

medium2022-03-31

CVE-2022-23800-Cross-site Scripting (XSS) within joomla/filter class

joomla-framework/filter · GHSA-qcv6-h33g-hvrc

critical2022-03-31

CVE-2022-23799-Variable Tampering within joomla/input class

joomla-framework/input · GHSA-49fj-qp6p-q544

critical2022-03-30

CVE-2022-24790-Puma vulnerable to HTTP Request Smuggling

puma/puma · GHSA-h99w-9q5r-gjq9

medium2022-03-30

CVE-2018-1000162-Cross-site Scripting in Parsedown

erusev/parsedown · GHSA-qgpv-86r3-87fh

high2022-03-30

CVE-2022-24789-Server side request forgery in C1 CMS

orckestra/c1-cms-foundation · GHSA-8pp6-8x4q-c5mx

medium2022-03-30

CVE-2022-23059-Cross site scripting in Shopizer

shopizer-ecommerce/shopizer · GHSA-p2j7-6g9h-32xh

medium2022-03-30

CVE-2022-28142-SSL/TLS certificate validation globally disabled by Jenkins Proxmox Plugin

jenkinsci/proxmox-plugin · GHSA-fhhx-r983-44xc

critical2022-03-30

CVE-2021-46743-Firebase PHP-JWT key/algorithm type confusion

firebase/php-jwt · GHSA-8xf4-w7qw-pjjw

high2022-03-30

CVE-2022-28155-XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin

jenkinsci/phoenix-autotest-plugin · GHSA-rwg2-w82x-v57j

medium2022-03-30

CVE-2022-28146-Arbitrary file read vulnerability in Jenkins Continuous Integration with Toad Edge Plugin

jenkinsci/ci-with-toad-edge-plugin · GHSA-8p4x-fq8v-xhv4

medium2022-03-30

CVE-2022-28133-Stored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin

jenkinsci/atlassian-bitbucket-server-integration-plugin · GHSA-45v7-65q8-x294

medium2022-03-30

CVE-2022-28138-CSRF vulnerability in Jenkins RocketChat Notifier Plugin

jenkinsci/rocketchatnotifier-plugin · GHSA-x25h-f84x-wh4m

medium2022-03-30

CVE-2022-28141-Password stored in plain text by Jenkins Proxmox Plugin

jenkinsci/proxmox-plugin · GHSA-w97x-j6rg-55v5

high2022-03-30

CVE-2022-28136-CSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter Plugin

jenkinsci/jiratestresultreporter-plugin · GHSA-vqcx-jw4r-6fp3

high2022-03-30

CVE-2022-28140-XXE vulnerability in Jenkins Flaky Test Handler Plugin

jenkinsci/flaky-test-handler-plugin · GHSA-v4rr-65x6-g69f

medium2022-03-30

CVE-2022-28134-Missing permission checks in Jekins Bitbucket Server Integration Plugin

jenkinsci/atlassian-bitbucket-server-integration-plugin · GHSA-r5r6-v8qh-pmpq

medium2022-03-30

CVE-2022-28135-Plaintext storage in Jenkins instant-messaging Plugin

jenkinsci/instant-messaging-plugin · GHSA-hpm9-fx8v-w45v

medium2022-03-30

CVE-2022-28137-Missing permission check in Jenkins JiraTestResultReporter Plugin

jenkinsci/jiratestresultreporter-plugin · GHSA-gc7m-x2cj-3775