Crx Content Package Deployer (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2022-06-23. Vendor: Jenkins.

CVEs of Crx Content Package Deployer

• CVE-2022-34184 - CVSS 5.4 (medium), 2022-06-23: Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views…
• CVE-2019-10439 - CVSS 4.3 (medium), 2019-10-16: A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with…
• CVE-2019-10438 - CVSS 6.5 (medium), 2019-10-16: A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission to connect to an…
• CVE-2019-10437 - CVSS 8.8 (high), 2019-10-16: A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers to connect to an…