Vendor/product archive

jenkins / crx_content_package_deployer CVEs

Beta · best-effort

4 CVEs tagged to jenkins / crx_content_package_deployer — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jenkins vendor archive

CVE-2022-34184

Published Jun 23, 2022

Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resul…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-10439

Published Oct 16, 2019

A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-10438

Published Oct 16, 2019

A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission to connect to an attacker-specified URL…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-10437

Published Oct 16, 2019

A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers to connect to an attacker-specified URL using attacke…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1