Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

jenkins / warnings_next_generation CVEs

Beta · best-effort

6 CVEs tagged to jenkins / warnings_next_generation — 0 Critical, 2 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to jenkins vendor archive

CVE-2022-23107

Published Jan 12, 2022

Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Configure permission to wr…

CVSS 8.1 · High
Vendor/product tagsBeta · best-effort

CVE-2021-21626

Published Mar 18, 2021

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2019-10326

Published May 31, 2019

A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds.

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2019-10325

Published May 31, 2019

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overvie…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2019-1003023

Published Feb 6, 2019

A cross-site scripting vulnerability exists in Jenkins Warnings Next Generation Plugin 1.0.1 and earlier in src/main/java/io/jenkins/plugins/analysis/core/model/DetailsTableModel.…

CVSS 6.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2019-1003008

Published Feb 6, 2019

A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and earlier in src/main/java/io/jenkins/plugins/analysis/warnings/groovy/GroovyP…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort
Showing 1-6 of 6 CVEsPage 1 of 1