Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jvnet.hudson.plugins:storable-configs-plugin

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
Maven Central

Advisories 4

  • A cross-site request forgery (CSRF) vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier allows attackers to have Jenkins…

    Affected: through 1.0.

  • Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

    Affected: through 1.0.

  • Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure…

    Affected: through 1.0.

  • Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller.

    Affected: through 1.0.