Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.jenkins.blueocean:blueocean

8 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
8
Registry
Maven Central

Advisories 8

  • A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an…

    Affected: fixed in 1.27.5.1.

  • A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an…

    Affected: fixed in 1.23.3.

  • Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with…

    Affected: fixed in 1.23.3.

  • An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in…

    Affected: fixed in 1.10.2.

  • A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js…

    Affected: fixed in 1.10.2.

  • Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches…

    Affected: fixed in 1.2.0.

  • Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches…

    Affected: fixed in 1.2.0.

  • The optional Run/Artifacts permission can be enabled by setting a Java system property.

    Affected: through 1.2.4.