Security advisories

medium2022-03-30

CVE-2022-28139-Missing permission check in Jenkins RocketChat Notifier Plugin

View chart →

jenkinsci/rocketchatnotifier-plugin · GHSA-4p8f-2fwv-6xcw

high2022-03-30

CVE-2022-28145-Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin

View chart →

jenkinsci/ci-with-toad-edge-plugin · GHSA-7jh8-ghwc-82cw

high2022-03-30

CVE-2022-28149-Stored Cross-site Scripting vulnerability in Jenkins Job and Node ownership Plugin

View chart →

jenkinsci/ownership-plugin · GHSA-x63v-prhc-xx6f

medium2022-03-30

CVE-2022-28153-Cross-site Scripting in Jenkins SiteMonitor Plugin

View chart →

jenkinsci/sitemonitor-plugin · GHSA-mh27-rxmr-8q4c

medium2022-03-30

CVE-2022-28148-Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin

View chart →

jenkinsci/ci-with-toad-edge-plugin · GHSA-mc92-c859-jr66

medium2022-03-30

CVE-2022-28152-CSRF vulnerability in Jenkins Job and Node ownership Plugin

View chart →

jenkinsci/ownership-plugin · GHSA-9hcj-449v-9234

high2022-03-30

CVE-2022-28154-enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability

View chart →

jenkinsci/covcomplplot-plugin · GHSA-8rx6-v5q4-xw3j

medium2022-03-30

CVE-2022-28147-Missing permission check in Jenkins Continuous Integration with Toad Edge Plugin

View chart →

jenkinsci/ci-with-toad-edge-plugin · GHSA-8hh2-rxm8-7fj8

high2022-03-30

CVE-2022-28150-Cross site request forgery in Jenkins Job and Node ownership Plugin

View chart →

jenkinsci/ownership-plugin · GHSA-85f9-w9cx-h363

medium2022-03-30

CVE-2022-28151-Missing permission check in Jenkins Job and Node ownership Plugin

View chart →

jenkinsci/ownership-plugin · GHSA-25f2-wgxj-ph29

medium2022-03-30

CVE-2022-28157-Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin

View chart →

jenkinsci/phoenix-autotest-plugin · GHSA-62hc-f8qj-5xc3

medium2022-03-30

CVE-2022-28159-Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin

View chart →

jenkinsci/selected-tests-executor-plugin · GHSA-q787-qgw2-j2qf

medium2022-03-30

CVE-2022-28158-Missing permission Jenkins Pipeline Phoenix AutoTest Plugin

View chart →

jenkinsci/phoenix-autotest-plugin · GHSA-4c7h-f2j9-9c46

medium2022-03-30

CVE-2022-28160-Arbitrary file read vulnerability in Jenkins Tests Selector Plugin

View chart →

jenkinsci/selected-tests-executor-plugin · GHSA-3r5x-x6xf-m8fv

high2022-03-30

CVE-2022-22941-SaltStack Salt Permissions Bypass

View chart →

saltstack/salt · GHSA-qcr3-hr2f-6557

low2022-03-30

CVE-2022-22935-SaltStack Salt Improper Authentication via Man in the Middle Attack

View chart →

saltstack/salt · GHSA-cvcc-5x92-gmhc

high2022-03-30

CVE-2022-22936-SaltStack Salt Authentication Bypass by Capture-replay

View chart →

saltstack/salt · GHSA-5r3f-3m3j-wcj2

high2022-03-30

CVE-2022-22934-SaltStack Improper Verification of Cryptographic Signature

View chart →

saltstack/salt · GHSA-2q4g-wfm6-5fpm

low2022-03-29

CVE-2022-24784-Discoverability of user password hash in Statamic CMS

View chart →

statamic/cms · GHSA-qcgx-7p5f-hxvr

critical2022-03-29

CVE-2022-24783-Sandbox bypass leading to arbitrary code execution in Deno

View chart →

denoland/deno · GHSA-838h-jqp6-cf2f