Jenkins Static Analysis Utilities
4 CVEs affecting Jenkins Static Analysis Utilities. Latest disclosed: 2020-11-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10308 | Medium | 6.5 | 2019-04-30 | A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed… |
CVE-2019-10307 | Medium | 6.5 | 2019-04-30 | A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handle… |
CVE-2020-2316 | Medium | 5.4 | 2020-11-04 | Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS)… |
CVE-2017-1000102 | Medium | 5.4 | 2017-10-05 | The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to inf… |