Cross-site Scripting in Jenkins Pipeline: Build Step Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-25762 · ADVISORY
• jenkinsci/pipeline-build-step-plugin commit 0eaf88a · WEB
• jenkinsci/pipeline-build-step-plugin · PACKAGE
• jenkins.io/security/advisory/2023-02-15 · WEB
• openwall.com/lists/oss-security/2023/02/15/4 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:pipeline-build-step

• CVE-2022-25184TRUNG BÌNH 6.5Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipeline script using the P…
• CVE-2020-2118TRUNG BÌNH 4.3A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allowed users with Overal…
• CVE-2017-1000089TRUNG BÌNH 5.3Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in …