Jenkins iceScrum Plugin vulnerable to stored Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-28160 · ADVISORY
• jenkinsci/icescrum-plugin · PACKAGE
• jenkins.io/security/advisory/2024-03-06 · WEB
• openwall.com/lists/oss-security/2024/03/06/3 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:icescrum

• CVE-2019-10443CAO 8.8Jenkins iceScrum Plugin 1.1.4 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be v…
• CVE-2019-10442TRUNG BÌNH 4.3A missing permission check in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers with Overall/Read permission to connect to an atta…
• CVE-2019-10441TRUNG BÌNH 4.3A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specifie…