Latest jenkins pipeline maven integration Vulnerabilities

● CVE-2023-41934

Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven settings in Pipeline b...

Jenkins Pipeline Maven Integration<=1330.v18e473854496

maven/org.jenkins-ci.plugins:pipeline-maven<=1330.v18e473854496

● CVE-2020-2256

Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting (XSS) vulnerabili...

Jenkins Pipeline Maven Integration<=3.9.2

maven/org.jenkins-ci.plugins:pipeline-maven<=3.9.2

● CVE-2020-2234

A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an attacker-specified JDBC URL using attacker-specified cr...

Jenkins Pipeline Maven Integration<=3.8.2

maven/org.jenkins-ci.plugins:pipeline-maven<3.8.3

● CVE-2020-2233

A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

Jenkins Pipeline Maven Integration<=3.8.2

maven/org.jenkins-ci.plugins:pipeline-maven<3.8.3

● CVE-2020-2235

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL using attacker-specified ...

Jenkins Pipeline Maven Integration<=3.8.2

maven/org.jenkins-ci.plugins:pipeline-maven<3.8.3

● CVE-2019-10327

An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven Integration Plugin 1.7.0 and earlier allowed attackers able to control a temporary directory's content on the agent running the M...

Jenkins Pipeline Maven Integration<=1.7.0

maven/org.jenkins-ci.plugins:pipeline-maven<3.7.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.