Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Convert To Pipeline Plugin — Jenkins Security Advisory 2023-03-21 Clear all filters
TI-2023-13195 CVE-2023-28677 · GHSA-7c44-m589-36w7

Command injection in Jenkins Convert To Pipeline Plugin

Priority MEDIUM 50

Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and Post-build Actions to the equivalent Pipeline step invocations, allowi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00779 Published 2023-03-23 No fix listed CWE-77
TI-2023-13194 CVE-2023-28676 · GHSA-48g9-h7g5-8pw2

Cross-site request forgery in Jenkins Convert To Pipeline Plugin

Priority MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers to create a Pipeline based on a Freestyle project, potentially leading to remote code execution (RC…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00635 Published 2023-03-23 No fix listed CWE-652