Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:fortify

5 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 3 medium
Registry
Maven Central

Advisories 5

  • CVE-2023-4301Medium 4.2

    CSRF vulnerability in Fortify Plugin allow capturing credentials

    Affected: fixed in 22.2.39.

  • CVE-2023-4302Medium 4.2

    Missing permission checks in Fortify Plugin allow capturing credentials

    Affected: fixed in 22.2.39.

  • CVE-2023-4303Medium 4.3

    HTML injection vulnerability in Fortify Plugin

    Affected: fixed in 22.2.39.

  • Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing…

    Affected: fixed in 20.2.35.

  • Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where…

    Affected: fixed in 19.2.30.