Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jvnet.hudson.plugins:analysis-core

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
Maven Central

Advisories 4

  • Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored…

    Affected: through 1.96.

  • A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form…

    Affected: fixed in 1.96.

  • A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the…

    Affected: fixed in 1.96.

  • The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability…

    Affected: fixed in 1.92.