Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Jenkins Build Failure Analyzer Plugin — Jenkins Security Advisory 2023-09-20 Clear all filters
TI-2023-23259 CVE-2023-43502 · GHSA-2wwh-qgh8-w9xw

Cross-site request forgery in Jenkins Build Failure Analyzer Plugin

Priority LOW 20

A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to delete Failure Causes.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00388 Published 2023-09-20 Fixed in 2.4.2 CWE-352
TI-2023-23258 CVE-2023-43501 · GHSA-55q6-r3hm-7ff4

Missing authorization in Jenkins Build Failure Analyzer Plugin

Priority LOW 30

A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00609 Published 2023-09-20 Fixed in 2.4.2 CWE-862
TI-2023-23257 CVE-2023-43500 · GHSA-58rq-69jp-xc23

Cross-site request forgery in Jenkins Build Failure Analyzer Plugin

Priority MEDIUM 40

A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and pa…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00472 Published 2023-09-20 Fixed in 2.4.2 CWE-352
TI-2023-23256 CVE-2023-43499 · GHSA-262f-77q5-rqv6

Cross-site scripting in Jenkins Build Failure Analyzer Plugin

Priority LOW 25

Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2023-09-20 Fixed in 2.4.2 CWE-79