Jenkins Scriptler Plugin

4 results · Clear filters · Feed

• Medium 4.3
  CVE-2023-50765

  Missing permission check in Jenkins Scriptler Plugin

  A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read the contents of a Groovy script by knowing its ID.

  Jenkins Project Jenkins Scriptler Plugin org.jenkins-ci.plugins:scriptler Web / CMS Maven
  Dec 13, 2023
• Medium 5.4
  CVE-2021-21700

  Stored XSS vulnerability in Jenkins Scriptler Plugin

  Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by exploitable by attackers able to create Scriptler scrip…

  Jenkins Project Jenkins Scriptler Plugin org.jenkins-ci.plugins:scriptler Web / CMS Maven
  Nov 12, 2021
• Medium 5.4
  CVE-2021-21668 EPSS 76%

  Stored XSS vulnerability in Jenkins Scriptler Plugin

  Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.

  Jenkins Project Jenkins Scriptler Plugin org.jenkins-ci.plugins:scriptler Web / CMS Maven
  Jun 16, 2021
• Medium 5.4
  CVE-2021-21667 EPSS 76%

  Stored XSS vulnerability in Jenkins Scriptler Plugin

  Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.

  Jenkins Project Jenkins Scriptler Plugin org.jenkins-ci.plugins:scriptler Web / CMS Maven
  Jun 16, 2021