Jenkins Deployment Dashboard Plugin

4 results · Clear filters · Feed

• Medium 4.3
  CVE-2023-50775

  Cross-site request forgery vulnerability in Jenkins Deployment Dashboard Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.

  Jenkins Project Jenkins Deployment Dashboard Plugin org.jenkins-ci.plugins:ec2-deployment-dashboard Web / CMS Maven
  Dec 13, 2023
• Medium 5.4
  CVE-2022-34798

  Missing Authorization in Jenkins Deployment Dashboard Plugin

  Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.

  Jenkins Project Jenkins Deployment Dashboard Plugin org.jenkins-ci.plugins:ec2-deployment-dashboard Web / CMS Maven
  Jun 30, 2022
• Medium 5.4
  CVE-2022-34797

  Cross-Site Request Forgery in Jenkins Deployment Dashboard Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to connect to an attacker-specified HTTP URL using attacker-specified credentials.

  Jenkins Project Jenkins Deployment Dashboard Plugin org.jenkins-ci.plugins:ec2-deployment-dashboard Web / CMS Maven
  Jun 30, 2022
• Medium 4.3
  CVE-2022-34796

  Jenkins Deployment Dashboard Plugin has Insufficiently Protected Credentials

  A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

  Jenkins Project Jenkins Deployment Dashboard Plugin org.jenkins-ci.plugins:ec2-deployment-dashboard Web / CMS Maven
  Jun 30, 2022