Stored XSS vulnerability in Jenkins Repository Connector Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-21618 · ADVISORY
• jenkinsci/repository-connector-plugin · PACKAGE
• jenkins.io/security/advisory/2021-02-24 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:repository-connector

• CVE-2022-36904TRUNG BÌNH 4.3Jenkins Repository Connector Plugin 2.2.0 and earlier does not perform a permission check in a method implementing form validation, allowing…
• CVE-2022-36903TRUNG BÌNH 4.3A missing permission check in Jenkins Repository Connector Plugin 2.2.0 and earlier allows attackers with Overall/Read permission to enumera…
• CVE-2022-34195TRUNG BÌNH 5.4Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on vi…
• CVE-2020-2149TRUNG BÌNH 5.3Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configura…
• CVE-2019-1003038CAO 7.8An insufficiently protected credentials vulnerability exists in Jenkins Repository Connector Plugin 1.2.4 and earlier in src/main/java/org/j…