Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins build-metrics Plugin unspecified Clear all filters
TI-2022-15592 CVE-2022-34785 · GHSA-qv56-j8fg-39h6

Incorrect authorization in Jenkins build-metrics Plugin

Priority LOW 21

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00699 Published 2022-06-30 No fix listed CWE-863
TI-2022-15591 CVE-2022-34784 · GHSA-j2gv-q44j-xm42

Cross-site scripting in Jenkins build-metrics Plugin

Priority LOW 26

Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Build/Update permission.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00777 Published 2022-06-30 No fix listed CWE-79