org.jenkins-ci.plugins:shelve-project-plugin

2 results · Feed

• High 8.1
  CVE-2020-2321

  CSRF vulnerability in Jenkins Shelve Project Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project.

  Jenkins Project Jenkins Shelve Project Plugin org.jenkins-ci.plugins:shelve-project-plugin Web / CMS Maven
  Dec 3, 2020
• Medium 5.4
  CVE-2018-1999029

  Stored Cross-Site Scripting Vulnerability in Jenkins Shelve Project Plugin

  A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProjectsAction/index.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed …

  org.jenkins-ci.plugins:shelve-project-plugin Maven
  Aug 1, 2018