Dry (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 69 known versions, newest CVE from 2018-01-23. Vendor: Jenkins.

CVEs of Dry

• CVE-2018-1000010 - CVSS 8.8 (high), 2018-01-23: Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions…
• CVE-2017-1000103 - CVSS 5.4 (medium), 2017-10-05: The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users…