Jenkins Job And Node Ownership vulnerabilities
5 vulnerabilities
Known vulnerabilities in Jenkins Job And Node Ownership, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2018-1000107jenkins · job_and_node_ownership +1 morejenkins job_and_node_ownershipAn improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.EPSS0.69%HighCVE-2022-28150jenkins project · jenkins job and node ownership plugin +2 morejenkins project jenkins job and node ownership pluginA cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change the owners and item-specific permissions of a job.EPSS0.72%MediumCVE-2022-28151jenkins project · jenkins job and node ownership plugin +2 morejenkins project jenkins job and node ownership pluginA missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job.EPSS0.74%MediumCVE-2022-28149jenkins project · jenkins job and node ownership plugin +2 morejenkins project jenkins job and node ownership pluginJenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.EPSS0.82%MediumCVE-2022-28152jenkins project · jenkins job and node ownership plugin +2 morejenkins project jenkins job and node ownership pluginA cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.EPSS0.61%