Jenkins

Cvs

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2022-29037

  • EPSS 25.85%
  • Published 12.04.2022 20:15:09
  • Last modified 21.11.2024 06:58:23

Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure p...

7.5

CVE-2020-2324

  • EPSS 0.15%
  • Published 03.12.2020 16:15:12
  • Last modified 21.11.2024 05:25:19

Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.