JK
Product
Jenkins Katalon Plugin
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add Jenkins Katalon Plugin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-43416 | 8.8 | Oct 19 | Jenkins Katalon Plugin 1.0.32 and earlier implements an agent/controller message that does not limit where it can be executed and allows invoking Katalon with configurable… Affected: through 1.0.32 |
| CVE-2022-43419 | 6.5 | Oct 19 | Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read… Affected: through 1.0.32 |
| CVE-2022-43417 | 4.3 | Oct 19 | Jenkins Katalon Plugin 1.0.32 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an… Affected: through 1.0.32 |
| CVE-2022-43418 | 4.3 | Oct 19 | A cross-site request forgery (CSRF) vulnerability in Jenkins Katalon Plugin 1.0.33 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified… Affected: through 1.0.33 |
Showing 4