Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:s3

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
Maven Central

Advisories 4

  • Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with…

    Affected: from 0.11.6, fixed in 0.11.7; fixed in 0.11.5.1.

  • Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models…

    Affected: from 0.11.6, fixed in 0.11.7; fixed in 0.11.5.1.

  • Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration…

    Affected: fixed in 0.11.5.

  • A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in…

    Affected: fixed in 0.11.0.