Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:s3

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-21651

    Missing Authorization in Jenkins S3 publisher Plugin

    Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain the list of configured profiles.

    Jenkins Project Jenkins S3 publisher Plugin org.jenkins-ci.plugins:s3 Web / CMS Maven
  • Medium 4.3
    CVE-2021-21650

    Missing Authorization in Jenkins S3 publisher Plugin

    Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain information about artifacts uploaded to S3, if the optional Run/Ar…

    Jenkins Project Jenkins S3 publisher Plugin org.jenkins-ci.plugins:s3 Web / CMS Maven
  • Medium 5.4
    CVE-2018-1000177

    Stored XSS vulnerability in Jenkins S3 Publisher Plugin

    A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containin…

    org.jenkins-ci.plugins:s3 Maven