Jenkins Project Inheritance Plugin vulnerable to cross site scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-34787 · ADVISORY
• jenkins.io/security/advisory/2022-06-30 · WEB

hudson.plugins:project-inheritance のその他の脆弱性

• CVE-2020-2198中 6.5Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting …
• CVE-2020-2197中 4.3Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance Pro…
• CVE-2019-10409中 4.3A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger…
• CVE-2019-10408中 4.3A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project gene…
• CVE-2019-10407中 6.5Jenkins Project Inheritance Plugin 2.0.0 and earlier displayed a list of environment variables passed to a build without masking sensitive v…