Jenkins Project Jenkins Mercurial Plugin
4 CVEs affecting Jenkins Project Jenkins Mercurial Plugin. Latest disclosed: 2022-10-19. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30948 | High | 7.5 | 2022-05-17 | Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's fi… |
CVE-2020-2305 | Medium | 6.5 | 2020-11-04 | Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
CVE-2022-43410 | Medium | 5.3 | 2022-10-19 | Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook end… |
CVE-2020-2306 | Medium | 4.3 | 2020-11-04 | A missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overall/Read permission to obtain a list of names of configured M… |