Jenkins Matrix Project Plugin

2 results · Clear filters · Feed

• Medium 4.3
  CVE-2024-23900

  Path traversal vulnerability in Jenkins Matrix Project Plugin

  Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with Item/Configure permission to create or replace any config.xml files on the Jenkins controller file …

  Jenkins Project Jenkins Matrix Project Plugin org.jenkins-ci.plugins:matrix-project Web / CMS Maven
  Jan 24, 2024
• Medium 5.4
  CVE-2022-20615 EPSS 82%

  Stored XSS vulnerability in Matrix Project Plugin

  Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.

  Jenkins Project Jenkins Matrix Project Plugin org.jenkins-ci.plugins:matrix-project Web / CMS Maven
  Jan 12, 2022