Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

hudson.plugins:project-inheritance

6 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6
Registry
Maven Central

Advisories 6

  • Jenkins Project Inheritance Plugin 21.04.03 and earlier does not escape the reason a build is blocked in tooltips, resulting in a…

    Affected: through 21.04.03.

  • Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when…

    Affected: through 21.04.03.

  • Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance…

    Affected: through 21.04.03.

  • A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to…

    Affected: fixed in 19.08.02.

  • A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project…

    Affected: fixed in 19.08.2.

  • Jenkins Project Inheritance Plugin 2.0.0 and earlier displayed a list of environment variables passed to a build without masking sensitive…

    Affected: fixed in 19.08.02.