Jenkins Continuous Integration With Toad Edge
4 CVEs affecting Jenkins Continuous Integration With Toad Edge. Latest disclosed: 2022-03-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28148 | Medium | 6.5 | 2022-03-29 | The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in… |
CVE-2022-28146 | Medium | 6.5 | 2022-03-29 | Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Item/Configure permission to read arbitrary files on the Jenkins con… |
CVE-2022-28145 | Medium | 5.4 | 2022-03-29 | Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves, resulting in a s… |
CVE-2022-28147 | Medium | 4.3 | 2022-03-29 | A missing permission check in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Overall/Read permission to check for t… |