Login Request a demo
ME
Product
Mercurial
by Jenkins · last CVE Oct 19, 2022
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities5Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mercurial to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-30948
7.5
2%
May 17
Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using…
Affected: before 2.16.1
CVE-2020-2305
6.5
1%
Nov 4
Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks
Affected: through 2.11
CVE-2022-43410
5.3
1%
Oct 19
Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook endpoint, including…
Affected: through 1251.va_b_121f184902
CVE-2018-1000112
5.3
1%
Mar 13
An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a…
Affected: through 2.2
CVE-2020-2306
4.3
1%
Nov 4
A missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overall/Read permission to obtain a list of names of configured Mercurial…
Affected: through 2.11
Showing 5