Jenkins Project Jenkins Blue Ocean Plugin vulnerabilities
4 vulnerabilities
Known vulnerabilities in Jenkins Project Jenkins Blue Ocean Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2022-30954jenkins project · jenkins blue ocean plugin +2 morejenkins project jenkins blue ocean pluginJenkins Blue Ocean Plugin 1.25.3 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server.CVSS6.5MediumEPSS0.92%RoutineCVE-2022-30953jenkins project · jenkins blue ocean plugin +2 morejenkins project jenkins blue ocean pluginA cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server.CVSS6.5MediumEPSS0.73%RoutineCVE-2020-2255jenkins project · jenkins blue ocean plugin +2 morejenkins project jenkins blue ocean pluginA missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.CVSS4.3MediumEPSS0.86%RoutineCVE-2020-2254jenkins project · jenkins blue ocean plugin +2 morejenkins project jenkins blue ocean pluginJenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system.CVSS6.5MediumEPSS2.12%