Mashup Portlets (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2023-04-02. Vendor: Jenkins.

CVEs of Mashup Portlets

• CVE-2023-28679 - CVSS 5.4 (medium), 2023-04-02: Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the "Generic JS Portlet" feature that lets a user populate a portlet using a custom JavaScript…
• CVE-2019-10347 - CVSS 8.8 (high), 2019-07-11: Jenkins Mashup Portlets Plugin stored credentials unencrypted on the Jenkins master where they can be viewed by users with access to the master file system.