Jenkins Warnings Next Generation Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins_project:jenkins_warnings_next_generation_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462) |
|---|---|
| Product | Jenkins Warnings Next Generation Plugin (5c987674-9915-5c1e-98f5-0107eb36140f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23107 |
vulnerable | 2026-06-08 05:40:56.327494 |
Details available
Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Configure permission to write and read specific files with a hard-coded suffix on the Jenkins controller file system.
Published: 2022-01-12T19:06:06.000Z
Updated: 2024-08-03T03:36:19.199Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21626 |
vulnerable | 2026-06-08 05:29:13.046254 |
Details available
Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.
Published: 2021-03-18T13:35:24.000Z
Updated: 2024-08-03T18:16:23.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1003023 |
vulnerable | 2026-06-08 05:12:21.427484 |
Details available
A cross-site scripting vulnerability exists in Jenkins Warnings Next Generation Plugin 1.0.1 and earlier in src/main/java/io/jenkins/plugins/analysis/core/model/DetailsTableModel.java, src/main/java/io/jenkins/plugins/analysis/core/model/SourceDetail.java, src/main/java/io/jenkins/plugins/analysis/core/model/SourcePrinter.java, src/main/java/io/jenkins/plugins/analysis/core/util/Sanitizer.java, src/main/java/io/jenkins/plugins/analysis/warnings/DuplicateCodeScanner.java that allows attackers with the ability to control warnings parser input to have Jenkins render arbitrary HTML.
Published: 2019-02-06T16:00:00.000Z
Updated: 2024-09-17T00:21:48.417Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1003008 |
vulnerable | 2026-06-08 05:12:21.396856 |
Details available
A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and earlier in src/main/java/io/jenkins/plugins/analysis/warnings/groovy/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint.
Published: 2019-02-06T16:00:00.000Z
Updated: 2024-09-17T00:21:22.209Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.