- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 9
- Registry
- Maven Central
Advisories 9
- CVE-2023-46655Unrated
Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are…
Affected: fixed in 1.1.33.
- CVE-2023-46654Unrated
Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup…
Affected: fixed in 1.1.33.
- CVE-2021-21647Unrated
Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read…
Affected: fixed in 1.1.18.1; from 1.1.19, fixed in 1.1.22.
- CVE-2019-10336Unrated
A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able to control the…
Affected: fixed in 1.1.7.
- CVE-2019-10335Unrated
A stored cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier allowed attackers able to configure jobs in…
Affected: fixed in 1.1.7.
- CVE-2019-10334Unrated
Jenkins ElectricFlow Plugin 1.1.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM when…
Affected: fixed in 1.1.7.
- CVE-2019-10333Unrated
Missing permission checks in Jenkins ElectricFlow Plugin 1.1.5 and earlier in various HTTP endpoints allowed users with Overall/Read…
Affected: fixed in 1.1.7.
- CVE-2019-10332Unrated
A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed users with…
Affected: fixed in 1.1.7.
- CVE-2019-10331Unrated
A cross-site request forgery vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed…
Affected: fixed in 1.1.7.