Jenkins ≫ Dependency Graph Viewer

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.4

CVE-2019-10349

Exploit

EPSS 0.79%
Published 11.07.2019 14:15:10
Last modified 21.11.2024 04:18:56

A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.

4.3

CVE-2017-1000388

EPSS 0.03%
Published 26.01.2018 02:29:00
Last modified 21.11.2024 03:04:36

Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data.