Filtered by vendor Jenkins
Subscriptions
Filtered by product Build-metrics
Subscriptions
Total
3 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2019-10475 | 1 Jenkins | 1 Build-metrics | 2024-08-04 | 6.1 Medium |
| A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin. | ||||
| CVE-2022-34784 | 1 Jenkins | 1 Build-metrics | 2024-08-03 | 5.4 Medium |
| Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Build/Update permission. | ||||
| CVE-2022-34785 | 1 Jenkins | 1 Build-metrics | 2024-08-03 | 4.3 Medium |
| Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them. | ||||
Page 1 of 1.