org.jvnet.hudson.plugins:analysis-core

4 results · Clear filters · Feed

• Medium 5.4
  CVE-2020-2316

  Stored XSS vulnerability in Jenkins Static Analysis Utilities Plugin

  Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

  Jenkins Project Jenkins Static Analysis Utilities Plugin org.jvnet.hudson.plugins:analysis-core Web / CMS Maven
  Nov 4, 2020
• Medium 6.5
  CVE-2019-10308

  Missing permission check in Jenkins Static Analysis Utilities Plugin

  A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers with Overall/Read permission to change the per-job default graph configuration for all us…

  Jenkins Project Jenkins Static Analysis Utilities Plugin org.jvnet.hudson.plugins:analysis-core Web / CMS Maven
  Apr 30, 2019
• Medium 4.3
  CVE-2019-10307

  Jenkins Static Analysis Utilities Plugin is vulnerable to Cross-site request forgery vulnerability

  A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers to change the per-job default graph configuration for all users.

  Jenkins Project Jenkins Static Analysis Utilities Plugin org.jvnet.hudson.plugins:analysis-core Web / CMS Maven
  Apr 30, 2019
• Medium 5.4
  CVE-2017-1000102

  Persistent XSS vulnerability in Static Analysis Utilities

  The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build w…

  org.jvnet.hudson.plugins:analysis-core Maven
  Oct 4, 2017