Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:support-core

5 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 medium
Registry
Maven Central

Advisories 5

  • CVE-2022-45383Medium 6.5

    An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle…

    Affected: fixed in 1206.1208.v9b_7a_1d48db_0f.

  • Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.

    Affected: fixed in 2.79.1.

  • Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (basic authentication…

    Affected: fixed in 2.72.1.

  • A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete…

    Affected: fixed in 2.64.

  • A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support…

    Affected: fixed in 2.64.