Mercurial (Jenkins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 75 known versions, newest CVE from 2022-10-19. Vendor: Jenkins.

CVEs of Mercurial

• CVE-2022-43410 - CVSS 5.3 (medium), 2022-10-19: Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook…
• CVE-2022-30948 - CVSS 7.5 (high), 2022-05-17: Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's…
• CVE-2020-2306 - CVSS 4.3 (medium), 2020-11-04: A missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overall/Read permission to obtain a list of names of configured…
• CVE-2020-2305 - CVSS 6.5 (medium), 2020-11-04: Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
• CVE-2018-1000112 - CVSS 5.3 (medium), 2018-03-13: An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with…