Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins XPath Configuration Viewer Plugin unspecified Clear all filters
TI-2022-15620 CVE-2022-34813 · GHSA-3fj7-78h2-w98x

Missing authorization in Jenkins XPath Configuration Viewer Plugin

Priority LOW 21

A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to create and delete XPath expressions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.006 Published 2022-06-30 No fix listed CWE-862
TI-2022-15619 CVE-2022-34812 · GHSA-3q7f-w8fr-368v

Cross-site request forgery in Jenkins XPath Configuration Viewer Plugin

Priority LOW 21

A cross-site request forgery (CSRF) vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers to create and delete XPath expressions.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00489 Published 2022-06-30 No fix listed CWE-352
TI-2022-15618 CVE-2022-34811 · GHSA-qm37-c4w6-h9v9

Missing authorization in Jenkins XPath Configuration Viewer Plugin

Priority LOW 21

A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to access the XPath Configuration Viewer page.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00604 Published 2022-06-30 No fix listed CWE-862