Build Failure Analyzer (Jenkins) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 64 known versions, newest CVE from 2023-09-20. Vendor: Jenkins.
CVEs of Build Failure Analyzer
- CVE-2023-43500 - CVSS 8.8 (high), 2023-09-20: A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to connect to an…
- CVE-2023-43502 - CVSS 4.3 (medium), 2023-09-20: A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to delete Failure Causes.
- CVE-2023-43501 - CVSS 6.5 (medium), 2023-09-20: A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an…
- CVE-2023-43499 - CVSS 5.4 (medium), 2023-09-20: Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS)…
- CVE-2020-2244 - CVSS 5.4 (medium), 2020-09-01: Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting…
- CVE-2019-16555 - CVSS 6.5 (medium), 2019-12-17: A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing…
- CVE-2019-16554 - CVSS 4.3 (medium), 2019-12-17: A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate…
- CVE-2019-16553 - CVSS 8.8 (high), 2019-12-17: A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers to have Jenkins evaluate a…
- CVE-2016-4988 - CVSS 6.1 (medium), 2017-02-09: Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script…
