org.jenkins-ci.plugins:quayio-trigger

2 results · Clear filters · Feed

• Medium 5.3
  CVE-2023-30519

  Jenkins Quay.io trigger Plugin webhook endpoint can be accessed without authentication

  A missing permission check in Jenkins Quay.io trigger Plugin 0.1 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.

  Jenkins Project Jenkins Quay.io trigger Plugin org.jenkins-ci.plugins:quayio-trigger Web / CMS Maven
  Apr 12, 2023
• Medium 5.4
  CVE-2023-30520

  Jenkins Quay.io trigger Plugin Cross-site Scripting vulnerability

  Jenkins Quay.io trigger Plugin 0.1 and earlier does not limit URL schemes for repository homepage URLs submitted via Quay.io trigger webhooks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Quay.…

  Jenkins Project Jenkins Quay.io trigger Plugin org.jenkins-ci.plugins:quayio-trigger Web / CMS Maven
  Apr 12, 2023