jenkins deployment dashboard vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv3

A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and previous versions allows malicious users to copy jobs.

Jenkins Deployment Dashboard

5.4

CVSSv3

Jenkins Deployment Dashboard Plugin 1.0.10 and previous versions does not escape environment names on its Deployment Dashboard view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.

Jenkins Deployment Dashboard

4.3

CVSSv3

A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and previous versions allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Jenkins Deployment Dashboard

4.3

CVSSv3

A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and previous versions allows malicious users to connect to an attacker-specified HTTP URL using attacker-specified credentials.

Jenkins Deployment Dashboard

4.3

CVSSv3

Jenkins Deployment Dashboard Plugin 1.0.10 and previous versions stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

Jenkins Deployment Dashboard

4.3

CVSSv3

Jenkins Deployment Dashboard Plugin 1.0.10 and previous versions does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.

Jenkins Deployment Dashboard

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook