Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-2256 · ADVISORY
• jenkinsci/pipeline-maven-plugin commit 78b8e6d · WEB
• jenkinsci/pipeline-maven-plugin · WEB
• jenkins.io/security/advisory/2020-09-16 · WEB
• openwall.com/lists/oss-security/2020/09/16/3 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:pipeline-maven

• CVE-2023-41934TRUNG BÌNH 5.3Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of …
• CVE-2020-2235TRUNG BÌNH 6.5A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect…
• CVE-2020-2234TRUNG BÌNH 6.5A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect t…
• CVE-2020-2233TRUNG BÌNH 6.5A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate…
• CVE-2019-10327CAO 8.1An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven Integration Plugin 1.7.0 and earlier allowed attackers able to contro…