Jenkins Project Jenkins Promoted Builds Plugin vulnerabilities

3 vulnerabilities

Known vulnerabilities in Jenkins Project Jenkins Promoted Builds Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2021-21641jenkins projectjenkins promoted builds plugin+2
EPSS score
1.16%
A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.5.4CVE-2022-29049jenkins projectjenkins promoted builds plugin+2
EPSS score
0.82%
Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name.5.4CVE-2022-29045jenkins projectjenkins promoted builds plugin+2
EPSS score
0.81%
Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.