Vulnerabilidades em Jenkins Project
1.522 resultadosCVE-2019-10310—A cross-site request forgery vulnerability in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescrEPSS 1.5%CVE-2022-28156—Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directEPSS 1.5%CVE-2022-27203—Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Item/Configure permission to read values from EPSS 1.5%CVE-2022-25183—Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directorEPSS 1.5%CVE-2021-21656—Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.EPSS 1.5%CVE-2021-21693—When creating temporary files, agent-to-controller access to create those files is only checked after they've been created in Jenkins 2.318 EPSS 1.5%CVE-2021-21694—FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions in EPSS 1.5%CVE-2022-23113—Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting iEPSS 1.5%CVE-2019-10353—CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CEPSS 1.5%CVE-2019-10314—Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM.EPSS 1.5%CVE-2019-1003083—A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers witEPSS 1.5%CVE-2019-1003091—A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allowsEPSS 1.5%CVE-2019-1003077—A missing permission check in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation meEPSS 1.5%CVE-2019-10293—A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with OverallEPSS 1.5%CVE-2019-10440—Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job config.xml files on the EPSS 1.5%CVE-2019-1003059—A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers with OverEPSS 1.5%CVE-2019-10279—A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows aEPSS 1.5%CVE-2019-10385—Jenkins eggPlant Plugin 2.2 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be vieweEPSS 1.5%CVE-2019-10366—Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they coulEPSS 1.5%CVE-2021-21685—Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create parent directories in FilePath#mkdirsEPSS 1.5%