Package · Maven

org.jvnet.hudson.plugins:sitemonitor

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.4

CVE-2022-28153

Cross-site Scripting in Jenkins SiteMonitor Plugin

Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins SiteMonitor Plugin org.jvnet.hudson.plugins:sitemonitor Web / CMS Maven

Mar 29, 2022
Medium 6.5

CVE-2019-10317

Jenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validation

Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins SiteMonitor Plugin org.jvnet.hudson.plugins:sitemonitor Web / CMS Maven

Apr 30, 2019