Jenkins Project Jenkins Convert To Pipeline Plugin
2 CVEs affecting Jenkins Project Jenkins Convert To Pipeline Plugin. Latest disclosed: 2023-04-02. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28677 | Critical | 9.8 | 2023-04-02 | Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and Post-buil… |
CVE-2023-28676 | High | 8.8 | 2023-04-02 | A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers to create a Pipeline based on a Freest… |