com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger

2 results · Clear filters · Feed

• High 8.0
  CVE-2022-29039

  Stored Cross-site Scripting vulnerability in Jenkins Gerrit Trigger Plugin

  Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Con…

  Jenkins Project Jenkins Gerrit Trigger Plugin com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Web / CMS Maven
  Apr 12, 2022
• High 8.8
  CVE-2019-16551

  Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin

  A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials.

  Jenkins Project Jenkins Gerrit Trigger Plugin com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Web / CMS Maven
  Dec 17, 2019