Jenkins Project Jenkins Warnings Next Generation Plugin
4 CVEs affecting Jenkins Project Jenkins Warnings Next Generation Plugin. Latest disclosed: 2022-01-12. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1003008 | High | 8.8 | 2019-02-06 | A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and earlier in src/main/java/io/jenkins/plugins/analysis/war… |
CVE-2022-23107 | High | 8.1 | 2022-01-12 | Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Config… |
CVE-2019-1003023 | Medium | 6.1 | 2019-02-06 | A cross-site scripting vulnerability exists in Jenkins Warnings Next Generation Plugin 1.0.1 and earlier in src/main/java/io/jenkins/plugins/analysis/core/mode… |
CVE-2021-21626 | Medium | 4.3 | 2021-03-18 | Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with… |