Vendor/product archive

jenkins / dry CVEs

Beta · best-effort

2 CVEs tagged to jenkins / dry — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jenkins vendor archive

CVE-2018-1000010

Published Jan 23, 2018

Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2017-1000103

Published Oct 5, 2017

The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1