Jenkins CRX Content Package Deployer Plugin subject to credentials enumeration via Missing Authorization

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-10439 · ADVISORY
• jenkinsci/crx-content-package-deployer-plugin commit 06cd0e7 · WEB
• jenkinsci/crx-content-package-deployer-plugin · WEB
• jenkins.io/security/advisory/2019-10-16 · WEB
• jenkins.io/security/advisory/2019-10-16

Lỗ hổng khác của org.jenkins-ci.plugins:crx-content-package-deployer

• CVE-2022-34184TRUNG BÌNH 5.4Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameter…
• CVE-2019-10438TRUNG BÌNH 6.5A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission t…
• CVE-2019-10437CAO 8.8A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers to connect to …