Jenkins Promoted Builds Plugin allowed unauthorized users to run some promotion processes

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-1000114 · ADVISORY
• jenkins.io/security/advisory/2018-02-26 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:promoted-builds

• CVE-2022-29049TRUNG BÌNH 5.4Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, …
• CVE-2022-29045TRUNG BÌNH 5.4Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build par…
• CVE-2021-21641TRUNG BÌNH 4.3A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.