WA
Product
Warnings
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Warnings to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2280 | 8.8 | Sep 23 | A cross-site request forgery (CSRF) vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code Affected: through 5.0.1 |
| CVE-2019-1003007 | 8.8 | Feb 6 | A cross-site request forgery vulnerability exists in Jenkins Warnings Plugin 5.0.0 and earlier in src/main/java/hudson/plugins/warnings/GroovyParser.java that allows attackers to… Affected: through 5.0.0 |
| CVE-2018-1000012 | 8.8 | Jan 23 | Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to… Affected: through 4.64 |
| CVE-2023-46651 | 6.5 | Oct 25 | Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture… Affected: through 10.5.0 |
Showing 4
