Missing Authorization in Jenkins Mercurial Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-2306 · ADVISORY
• jenkinsci/mercurial-plugin commit edd59db · WEB
• CVEProject/cvelist · WEB
• jenkins.io/security/advisory/2020-11-04 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:mercurial

• CVE-2022-43410TRUNG BÌNH 5.3Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling thro…
• CVE-2022-30949TRUNG BÌNH 5.3Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins…
• CVE-2022-30948CAO 7.5Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenk…
• CVE-2022-30947CAO 7.5Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins …
• CVE-2020-2305TRUNG BÌNH 6.5Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.