Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.xebialabs.deployit.ci:deployit-plugin

6 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6
Registry
Maven Central

Advisories 6

  • A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers to connect to…

    Affected: fixed in 10.0.2.

  • An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to…

    Affected: fixed in 10.0.2.

  • A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier allows attackers with Overall/Read permission to…

    Affected: fixed in 10.0.2.

  • A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Overall/Read permission to…

    Affected: fixed in 10.0.2.

  • A missing permission check in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method…

    Affected: fixed in 7.5.5.

  • A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form…

    Affected: fixed in 7.5.5.