Jenkins Project Jenkins Job And Node Ownership Plugin vulnerabilities
4 vulnerabilities
Known vulnerabilities in Jenkins Project Jenkins Job And Node Ownership Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-28150jenkins project · jenkins job and node ownership plugin +2 morejenkins project jenkins job and node ownership pluginA cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change the owners and item-specific permissions of a job.EPSS0.72%MediumCVE-2022-28151jenkins project · jenkins job and node ownership plugin +2 morejenkins project jenkins job and node ownership pluginA missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job.EPSS0.74%MediumCVE-2022-28149jenkins project · jenkins job and node ownership plugin +2 morejenkins project jenkins job and node ownership pluginJenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.EPSS0.82%MediumCVE-2022-28152jenkins project · jenkins job and node ownership plugin +2 morejenkins project jenkins job and node ownership pluginA cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.EPSS0.61%