Blue Ocean (Jenkins) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 125 known versions, newest CVE from 2023-08-16. Vendor: Jenkins.
CVEs of Blue Ocean
- CVE-2023-40341 - CVSS 8.8 (high), 2023-08-16: A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL,…
- CVE-2022-30954 - CVSS 6.5 (medium), 2022-05-17: Jenkins Blue Ocean Plugin 1.25.3 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to…
- CVE-2022-30953 - CVSS 6.5 (medium), 2022-05-17: A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP…
- CVE-2022-30952 - CVSS 6.5 (medium), 2022-05-17: Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and earlier allows attackers with Job/Configure permission to access credentials with attacker-specified…
- CVE-2020-2255 - CVSS 4.3 (medium), 2020-09-16: A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified…
- CVE-2020-2254 - CVSS 6.5 (medium), 2020-09-16: Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create…
- CVE-2019-1003012 - CVSS 6.5 (medium), 2019-02-06: A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js,…
- CVE-2019-1003013 - CVSS 5.4 (medium), 2019-02-06: An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in…
- CVE-2017-1000110 - CVSS 4.3 (medium), 2017-10-05: Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a…
- CVE-2017-1000106 - CVSS 8.5 (high), 2017-10-05: Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a…
- CVE-2017-1000105 - CVSS 5.3 (medium), 2017-10-05: The optional Run/Artifacts permission can be enabled by setting a Java system property. Blue Ocean did not check this permission before providing access to…
