Filtered by vendor Jenkins Subscriptions
Filtered by product Continuous Integration With Toad Edge Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-28148 2 Jenkins, Microsoft 2 Continuous Integration With Toad Edge, Windows 2024-11-21 6.5 Medium
The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers.
CVE-2022-28147 1 Jenkins 1 Continuous Integration With Toad Edge 2024-11-21 4.3 Medium
A missing permission check in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
CVE-2022-28146 1 Jenkins 1 Continuous Integration With Toad Edge 2024-11-21 6.5 Medium
Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Item/Configure permission to read arbitrary files on the Jenkins controller by specifying an input folder on the Jenkins controller as a parameter to its build steps.
CVE-2022-28145 1 Jenkins 1 Continuous Integration With Toad Edge 2024-11-21 5.4 Medium
Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves, resulting in a stored cross-site scripting (XSS) exploitable by attackers with Item/Configure permission or otherwise able to control report contents.