Jenkins Blue Ocean Plugins vulnerabilities | LiveThreat CVE Feed

Product

Jenkins Blue Ocean Plugins

by Jenkins project · last CVE Feb 6, 2019

CVEs

On KEV

6.5

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add Jenkins Blue Ocean Plugins to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-1003012	6.5	1%	Feb 6	A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts,… Affected: 1.10.1 and earlier
CVE-2019-1003013	5.4	1%	Feb 6	An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/Export.java,… Affected: 1.10.1 and earlier