Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Jenkins Job and Node ownership Plugin unspecified Clear all filters
TI-2022-10950 CVE-2022-28152 · GHSA-9hcj-449v-9234

Cross-site request forgery in Jenkins Job and Node ownership Plugin

Priority LOW 21

A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00607 Published 2022-03-29 No fix listed CWE-352
TI-2022-10949 CVE-2022-28151 · GHSA-25f2-wgxj-ph29

Missing authorization in Jenkins Job and Node ownership Plugin

Priority LOW 21

A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00743 Published 2022-03-29 No fix listed CWE-862
TI-2022-10948 CVE-2022-28150 · GHSA-85f9-w9cx-h363

Cross-site request forgery in Jenkins Job and Node ownership Plugin

Priority LOW 39

A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change the owners and item-specific permissions of a job.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00717 Published 2022-03-29 No fix listed CWE-352
TI-2022-10947 CVE-2022-28149 · GHSA-x63v-prhc-xx6f

Cross-site scripting in Jenkins Job and Node ownership Plugin

Priority LOW 26

Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure perm…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00824 Published 2022-03-29 No fix listed CWE-79