Jenkins Crx Content Package Deployer
4 CVEs affecting Jenkins Crx Content Package Deployer. Latest disclosed: 2022-06-23. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10437 | High | 8.8 | 2019-10-16 | A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers to connect to an attacker-specifi… |
CVE-2019-10438 | Medium | 6.5 | 2019-10-16 | A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission to connect to an att… |
CVE-2022-34184 | Medium | 5.4 | 2022-06-23 | Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displayi… |
CVE-2019-10439 | Medium | 4.3 | 2019-10-16 | A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Ov… |