Jenkins Project Jenkins Static Analysis Utilities Plugin
3 CVEs affecting Jenkins Project Jenkins Static Analysis Utilities Plugin. Latest disclosed: 2020-11-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10308 | Medium | 6.5 | 2019-04-30 | A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed… |
CVE-2019-10307 | Medium | 6.5 | 2019-04-30 | A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handle… |
CVE-2020-2316 | Medium | 5.4 | 2020-11-04 | Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS)… |