Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Jenkins Folders Plugin — Jenkins Security Advisory 2023-08-16 Clear all filters
TI-2023-21167 CVE-2023-40338 · GHSA-36hq-v2fc-rpqp

Sensitive information in log files in Jenkins Folders Plugin

Priority LOW 21

Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier displays an error message that includes an absolute path of a log file when attempting to access the Scan Organization Folder Log if no logs are available, exposing…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00643 Published 2023-08-16 Partial fix · 6.848.ve3b CWE-532
TI-2023-21166 CVE-2023-40337 · GHSA-22c3-whjv-hrfm

Cross-site request forgery in Jenkins Folders Plugin

Priority LOW 20

A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00385 Published 2023-08-16 Partial fix · 6.848.ve3b CWE-352
TI-2023-21165 CVE-2023-40336 · GHSA-4vqp-pcm3-73xp

Cross-site request forgery in Jenkins Folders Plugin

Priority MEDIUM 40

A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00472 Published 2023-08-16 Partial fix · 6.848.ve3b CWE-352