Missing Authorization in Jenkins Blue Ocean Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2017-1000105 · ADVISORY
• jenkins.io/security/advisory/2017-08-07 · WEB
• jenkins.io/security/advisory/2017-08-07 · Vendor Advisory

Lỗ hổng khác của io.jenkins.blueocean:blueocean

• CVE-2023-40341CAO 8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker…
• CVE-2020-2255TRUNG BÌNH 4.3A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an at…
• CVE-2020-2254TRUNG BÌNH 6.5Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure…
• CVE-2019-1003013TRUNG BÌNH 5.4An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/…
• CVE-2019-1003012TRUNG BÌNH 6.5A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blue…