Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jenkins warnings next generation vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv2
CVE-2022-23107
Jenkins Warnings Next Generation Plugin 9.10.2 and previous versions does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Configure permission to write and read specific files with a hard-coded suffix on the Jenkins controller file system.
Jenkins Warnings Next Generation 9.7.0Jenkins Warnings Next Generation
6.8
CVSSv2
CVE-2019-1003008
A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and previous versions in src/main/java/io/jenkins/plugins/analysis/warnings/groovy/GroovyParser.java that allows malicious users to execute arbitrary code via a form validation HTTP...
Jenkins Warnings Next Generation
3.5
CVSSv2
CVE-2019-10325
A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and previous versions allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages.
Jenkins Warnings Next Generation
4
CVSSv2
CVE-2021-21626
Jenkins Warnings Next Generation Plugin 8.4.4 and previous versions does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specifie...
Jenkins Warnings Next Generation
4.3
CVSSv2
CVE-2019-1003023
A cross-site scripting vulnerability exists in Jenkins Warnings Next Generation Plugin 1.0.1 and previous versions in src/main/java/io/jenkins/plugins/analysis/core/model/DetailsTableModel.java, src/main/java/io/jenkins/plugins/analysis/core/model/SourceDetail.java, src/main/java...
Jenkins Warnings Next Generation
4.3
CVSSv2
CVE-2019-10326
A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and previous versions allowed malicious users to reset warning counts for future builds.
Jenkins Warnings Next Generation 5.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook