Read the docs
Red Hat Security Advisory

RHSA-2022:2205

OpenShift Container Platform 4.9.33 packages and security update

Released 2022-05-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2022-11602 CVE-2022-29036 · GHSA-rvg5-f5fj-mxvg

Cross-site scripting in Jenkins Credentials Plugin

Priority MEDIUM 62

Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.71926 Published 2022-04-12 Fixed in 2.6.1.1, 1074.1076.v39c30cecb_0e2 +1 CWE-79
TI-2022-11613 CVE-2022-29047 · GHSA-hh6f-6fp5-gfpv

Incorrect authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin

Priority LOW 32

Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requests (or equivalent), but not able to commit directly to the configured SCM, to e…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01184 Published 2022-04-12 Fixed in 2.21.3, 566.vd0a CWE-863
TI-2022-11612 CVE-2022-29046 · GHSA-wpr6-qvcq-8269

Cross-site scripting in Jenkins Subversion Plugin

Priority LOW 29

Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnera…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02512 Published 2022-04-12 Fixed in 2.15.4 CWE-79
TI-2022-11607 CVE-2022-29041 · GHSA-m3p3-2gp6-ghq8

Cross-site scripting in Jenkins Jira Plugin

Priority LOW 26

Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XS…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00855 Published 2022-04-12 Fixed in 3.6.1, 3.7.1 CWE-79