Jenkins

Pipeline: Phoenix Autotest

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2022-28155

  • EPSS 5.36%
  • Published 29.03.2022 13:15:10
  • Last modified 21.11.2024 06:56:51

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

6.5

CVE-2022-28156

  • EPSS 0.62%
  • Published 29.03.2022 13:15:10
  • Last modified 21.11.2024 06:56:51

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace.

6.5

CVE-2022-28157

  • EPSS 0.8%
  • Published 29.03.2022 13:15:10
  • Last modified 21.11.2024 06:56:51

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server.

6.5

CVE-2022-28158

  • EPSS 0.4%
  • Published 29.03.2022 13:15:10
  • Last modified 21.11.2024 06:56:51

A missing permission check in Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.