Jenkins Dependency Graph Viewer plugin vulnerable to missing permission checks

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-1000388 · ADVISORY
• jenkins.io/security/advisory/2017-10-23 · WEB
• jenkins.io/security/advisory/2017-10-23 · Vendor Advisory

org.jenkins-ci.plugins:depgraph-view のその他の脆弱性

• CVE-2019-10349中 5.4A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure j…