Jenkins S3 Publisher
4 CVEs affecting Jenkins S3 Publisher. Latest disclosed: 2021-05-11. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-2114 | High | 7.5 | 2020-02-12 | Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially res… |
CVE-2018-1000177 | Medium | 5.4 | 2018-05-08 | A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jel… |
CVE-2021-21651 | Medium | 4.3 | 2021-05-11 | Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obta… |
CVE-2021-21650 | Medium | 4.3 | 2021-05-11 | Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers wi… |