# com.synopsys.jenkinsci:ownership (Maven) vulnerabilities 5 known vulnerabilities, with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://central.sonatype.com/artifact/com.synopsys.jenkinsci/ownership ## Advisories (5) ### [CVE-2022-28152](https://cve.now/CVE-2022-28152): A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore… - Severity: Unrated - Published: Mar 29, 2022 - Affected: through 0.13.0. ### [CVE-2022-28151](https://cve.now/CVE-2022-28151): A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to… - Severity: Unrated - Published: Mar 29, 2022 - Affected: through 0.13.0. ### [CVE-2022-28150](https://cve.now/CVE-2022-28150): A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change… - Severity: Unrated - Published: Mar 29, 2022 - Affected: through 0.13.0. ### [CVE-2022-28149](https://cve.now/CVE-2022-28149): Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in a stored… - Severity: Unrated - Published: Mar 29, 2022 - Affected: through 0.13.0. ### [CVE-2018-1000107](https://cve.now/CVE-2018-1000107): An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java… - Severity: Unrated - Published: Mar 13, 2018 - Affected: fixed in 0.12.0. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/maven/com.synopsys.jenkinsci:ownership Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.