Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Jenkins HTML Publisher Plugin — Jenkins Security Advisory 2024-03-06 Clear all filters
TI-2024-18729 CVE-2024-28151 · GHSA-478x-m3mx-7j3f

Path traversal in Jenkins HTML Publisher Plugin

Priority LOW 22

Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00939 Published 2024-03-06 Partial fix · 1.32.1 CWE-22
TI-2024-18728 CVE-2024-28150 · GHSA-xrrw-9j78-hpf3

Cross-site scripting in Jenkins HTML Publisher Plugin

Priority LOW 23

Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, and index page titles shown as part of the report frame, resulting in a stored cross-site scripting (XSS) vulnerability exploitable…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00681 Published 2024-03-06 Partial fix · 1.32.1 CWE-79
TI-2024-18727 CVE-2024-28149 · GHSA-8vcg-v7g4-3vr7

Cross-site scripting in Jenkins HTML Publisher Plugin

Priority LOW 30

Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whethe…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00704 Published 2024-03-06 Partial fix · 1.32.1 CWE-79