Cross-site Scripting in Jenkins Deployment Dashboard Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-34795 · ADVISORY
• jenkinsci/ec2-deployment-dashboard · PACKAGE
• jenkins.io/security/advisory/2022-06-30 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:ec2-deployment-dashboard

• CVE-2023-50775TRUNG BÌNH 4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.
• CVE-2022-34799TRUNG BÌNH 4.3Jenkins Deployment Dashboard Plugin 1.0.10 and earlier stores a password unencrypted in its global configuration file on the Jenkins control…
• CVE-2022-34798TRUNG BÌNH 4.3Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers wit…
• CVE-2022-34797TRUNG BÌNH 4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to connect to a…
• CVE-2022-34796TRUNG BÌNH 4.3A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers with Overall/Read permission to enumer…