Package · Maven

org.6wind.jenkins:lockable-resources

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.4

CVE-2020-2281

CSRF vulnerability in Jenkins Lockable Resources Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources.

Jenkins Project Jenkins Lockable Resources Plugin org.6wind.jenkins:lockable-resources Web / CMS Maven

Sep 23, 2020
Medium 5.4

CVE-2019-1003042

Jenkins Lockable Resources Plugin XSS vulnerability

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.

Jenkins Project Jenkins Lockable Resources Plugin org.6wind.jenkins:lockable-resources Web / CMS Maven

Mar 28, 2019