Project Inheritance (Jenkins) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2022-06-30. Vendor: Jenkins.

CVEs of Project Inheritance

• CVE-2022-34787 - CVSS 5.4 (medium), 2022-06-30: Jenkins Project Inheritance Plugin 21.04.03 and earlier does not escape the reason a build is blocked in tooltips, resulting in a cross-site scripting (XSS)…
• CVE-2020-2198 - CVSS 6.5 (medium), 2020-06-03: Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml…
• CVE-2020-2197 - CVSS 4.3 (medium), 2020-06-03: Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance Project job…
• CVE-2019-10409 - CVSS 4.3 (medium), 2019-09-25: A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project…
• CVE-2019-10408 - CVSS 4.3 (medium), 2019-09-25: A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project generation from…
• CVE-2019-10407 - CVSS 6.5 (medium), 2019-09-25: Jenkins Project Inheritance Plugin 2.0.0 and earlier displayed a list of environment variables passed to a build without masking sensitive variables…