Package · Maven

org.jenkins-ci.plugins:rapiddeploy-jenkins

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

High 7.6

CVE-2020-2171

XXE vulnerability in Jenkins RapidDeploy Plugin

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins RapidDeploy Plugin org.jenkins-ci.plugins:rapiddeploy-jenkins Web / CMS Maven

Mar 25, 2020
Medium 5.4

CVE-2020-2170

Stored XSS vulnerability in Jenkins RapidDeploy Plugin

Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote server, resulting in a stored XSS vulnerability.

Jenkins Project Jenkins RapidDeploy Plugin org.jenkins-ci.plugins:rapiddeploy-jenkins Web / CMS Maven

Mar 25, 2020
Medium 4.3

CVE-2019-16571

Jenkins RapidDeploy Plugin missing permission check

A missing permission check in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server.

Jenkins Project Jenkins RapidDeploy Plugin org.jenkins-ci.plugins:rapiddeploy-jenkins Web / CMS Maven

Dec 17, 2019
Medium 4.3

CVE-2019-16570

Jenkins RapidDeploy Plugin Cross-Site Request Forgery plugin

A cross-site request forgery vulnerability in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers to connect to an attacker-specified web server.

Jenkins Project Jenkins RapidDeploy Plugin org.jenkins-ci.plugins:rapiddeploy-jenkins Web / CMS Maven

Dec 17, 2019