Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Quay.io trigger Plugin — Jenkins Security Advisory 2023-04-12 Clear all filters
TI-2023-14355 CVE-2023-30520 · GHSA-2jgw-28qh-6mg8

Cross-site scripting in Jenkins Quay.io trigger Plugin

Priority LOW 25

Jenkins Quay.io trigger Plugin 0.1 and earlier does not limit URL schemes for repository homepage URLs submitted via Quay.io trigger webhooks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0048 Published 2023-04-12 No fix listed CWE-79
TI-2023-14354 CVE-2023-30519 · GHSA-q2fc-9ww2-ggfj

Missing authorization in Jenkins Quay.io trigger Plugin

Priority LOW 30

A missing permission check in Jenkins Quay.io trigger Plugin 0.1 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0046 Published 2023-04-12 No fix listed CWE-862