Login Request a demo
EL
Product
Electricflow
by Jenkins · last CVE Jun 11, 2019
6
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 0Medium 6Low 0
Severity
All severities6Critical0High0Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Electricflow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10334
6.5
1%
Jun 11
Jenkins ElectricFlow Plugin 1.1.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM when MultipartUtility.java is used to upload files
Affected: through 1.1.5
CVE-2019-10336
6.1
1%
Jun 11
A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able to control the output of the ElectricFlow API to inject…
Affected: through 1.1.6
CVE-2019-10335
5.4
1%
Jun 11
A stored cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier allowed attackers able to configure jobs in Jenkins or control the output of the…
Affected: through 1.1.6
CVE-2019-10333
4.3
1%
Jun 11
Missing permission checks in Jenkins ElectricFlow Plugin 1.1.5 and earlier in various HTTP endpoints allowed users with Overall/Read access to obtain information about the Jenkins…
Affected: through 1.1.5
CVE-2019-10332
4.3
2%
Jun 11
A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed users with Overall/Read access to connect to an…
Affected: through 1.1.5
CVE-2019-10331
4.3
1%
Jun 11
A cross-site request forgery vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed attackers to connect to an attacker-specified…
Affected: through 1.1.5
Showing 6