com.xebialabs.deployit.ci:deployit-plugin

6 results · Feed

• High 8.0
  CVE-2021-21665

  CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials

  A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/pa…

  Jenkins Project Jenkins XebiaLabs XL Deploy Plugin com.xebialabs.deployit.ci:deployit-plugin Web / CMS Maven
  Jun 10, 2021
• Medium 6.5
  CVE-2021-21664

  Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials

  An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing …

  Jenkins Project Jenkins XebiaLabs XL Deploy Plugin com.xebialabs.deployit.ci:deployit-plugin Web / CMS Maven
  Jun 10, 2021
• Medium 4.3
  CVE-2021-21663

  Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials

  A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Userna…

  Jenkins Project Jenkins XebiaLabs XL Deploy Plugin com.xebialabs.deployit.ci:deployit-plugin Web / CMS Maven
  Jun 10, 2021
• Medium 4.3
  CVE-2021-21662

  Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs

  A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.

  Jenkins Project Jenkins XebiaLabs XL Deploy Plugin com.xebialabs.deployit.ci:deployit-plugin Web / CMS Maven
  Jun 10, 2021
• Medium 4.3
  CVE-2019-10304

  Jenkins XebiaLabs XL Deploy Plugin vulnerable to Cross-site request forgery (CSRF)

  A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.

  Jenkins Project Jenkins XebiaLabs XL Deploy Plugin com.xebialabs.deployit.ci:deployit-plugin Web / CMS Maven
  Apr 18, 2019
• Medium 6.5
  CVE-2019-10305

  Missing permission check in Jenkins XebiaLabs XL Deploy Plugin

  A missing permission check in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

  Jenkins Project Jenkins XebiaLabs XL Deploy Plugin com.xebialabs.deployit.ci:deployit-plugin Web / CMS Maven
  Apr 18, 2019