Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:repository-connector

6 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6
Registry
Maven Central

Advisories 6

  • Jenkins Repository Connector Plugin 2.2.0 and earlier does not perform a permission check in a method implementing form validation…

    Affected: through 2.2.0.

  • A missing permission check in Jenkins Repository Connector Plugin 2.2.0 and earlier allows attackers with Overall/Read permission to…

    Affected: through 2.2.0.

  • Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on…

    Affected: through 2.2.0.

  • Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a…

    Affected: fixed in 2.0.3.

  • Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins…

    Affected: fixed in 2.0.0.

  • An insufficiently protected credentials vulnerability exists in Jenkins Repository Connector Plugin 1.2.4 and earlier in…

    Affected: fixed in 1.2.5.