org.jenkins-ci.plugins:swarm

3 results · Feed

• Medium 5.4
  CVE-2020-2192

  CSRF vulnerability in Jenkins Swarm Plugin

  A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels.

  Jenkins Project Jenkins Self-Organizing Swarm Plug-in Modules Plugin org.jenkins-ci.plugins:swarm Web / CMS Maven
  Jun 3, 2020
• Medium 5.4
  CVE-2020-2191

  Improper permission checks in Jenkins Swarm Plugin

  Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that allow adding and removing agent labels.

  Jenkins Project Jenkins Self-Organizing Swarm Plug-in Modules Plugin org.jenkins-ci.plugins:swarm Web / CMS Maven
  Jun 3, 2020
• Medium 6.1
  CVE-2019-10309

  Jenkins Self-Organizing Swarm Plug-in Modules Plugin XXE vulnerability via UDP broadcast response

  Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do not prevent XML External Entity processing when processing the responses, allowing unauthorized attackers on the same network to read arbitrary…

  Jenkins Project Jenkins Self-Organizing Swarm Plug-in Modules Plugin org.jenkins-ci.plugins:swarm Web / CMS Maven
  Apr 30, 2019