Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:docker-commons

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2022-20617 Public exploit

    OS command execution vulnerability in Jenkins Docker Commons Plugin

    Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configur…

    Jenkins Project Jenkins Docker Commons Plugin org.jenkins-ci.plugins:docker-commons Web / CMS Maven
  • Medium 6.5
    CVE-2017-1000094

    Jenkins Docker Commons Plugin allows any user with Overall/Read permission to get list of valid credentials IDs

    Docker Commons Plugin provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use to authenticate with a Docker Registry. This functionality did not check permissions, allowing any user with Overall/Read …

    org.jenkins-ci.plugins:docker-commons Maven