Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer

10 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
10
Registry
Maven Central

Advisories 10

  • A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to delete…

    Affected: fixed in 2.4.2.

  • A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to…

    Affected: fixed in 2.4.2.

  • A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to connect…

    Affected: fixed in 2.4.2.

  • Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored…

    Affected: fixed in 2.4.2.

  • Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a…

    Affected: fixed in 1.27.1.

  • A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't…

    Affected: fixed in 1.24.2.

  • A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to…

    Affected: fixed in 1.24.2.

  • A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers to have Jenkins…

    Affected: fixed in 1.24.2.

  • Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject…

    Affected: fixed in 1.16.0.

  • Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users…

    Affected: fixed in 1.5.1.