Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins Build-Publisher Plugin unspecified Clear all filters
TI-2022-19742 CVE-2022-41232 · GHSA-phr4-94xx-259m

Cross-site request forgery in Jenkins Build-Publisher Plugin

Priority LOW 38

A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to replace any config.xml file on the Jenkins controller file system with an empty file by providing a…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0054 Published 2022-09-21 No fix listed CWE-352
TI-2022-19741 CVE-2022-41231 · GHSA-jrqh-c9v8-ccx9

Path traversal in Jenkins Build-Publisher Plugin

Priority LOW 29

Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API en…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01447 Published 2022-09-21 No fix listed CWE-22
TI-2022-19740 CVE-2022-41230 · GHSA-3jp6-q9cg-rvgj

Missing authorization in Jenkins Build-Publisher Plugin

Priority LOW 21

Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain names and URLs of Jenkins servers that the plugin is conf…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00621 Published 2022-09-21 No fix listed CWE-862