Jenkins Project Jenkins Maven Metadata Plugin For Jenkins Ci Server Plugin
2 CVEs affecting Jenkins Project Jenkins Maven Metadata Plugin For Jenkins Ci Server Plugin. Latest disclosed: 2022-07-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36905 | Medium | 5.4 | 2022-07-27 | Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.2 and earlier does not perform URL validation for the Repository Base URL of List maven artifact v… |
CVE-2022-34190 | Medium | 5.4 | 2022-06-23 | Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.1 and earlier does not escape the name and description of List maven artifact versions parameters… |