Jenkins Health Advisor by CloudBees Plugin Vulnerable to Cross-Site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-47885 · ADVISORY
• jenkinsci/cloudbees-jenkins-advisor-plugin commit 4b456b3 · WEB
• jenkinsci/cloudbees-jenkins-advisor-plugin · PACKAGE
• jenkins.io/security/advisory/2025-05-14 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:cloudbees-jenkins-advisor

• CVE-2020-2258TRUNG BÌNH 4.3Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing att…
• CVE-2020-2094TRUNG BÌNH 4.3A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to se…
• CVE-2020-2093CAO 8.8A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email w…