Publish Over Ssh (Jenkins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 42 known versions, newest CVE from 2022-01-12. Vendor: Jenkins.

CVEs of Publish Over Ssh

• CVE-2022-23112 - CVSS 6.5 (medium), 2022-01-12: A missing permission check in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers with Overall/Read access to connect to an attacker-specified…
• CVE-2022-23111 - CVSS 4.3 (medium), 2022-01-12: A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers to connect to an attacker-specified SSH…
• CVE-2022-23114 - CVSS 3.3 (low), 2022-01-12: Jenkins Publish Over SSH Plugin 1.22 and earlier stores password unencrypted in its global configuration file on the Jenkins controller where it can be viewed…
• CVE-2022-23110 - CVSS 4.8 (medium), 2022-01-12: Jenkins Publish Over SSH Plugin 1.22 and earlier does not escape the SSH server name, resulting in a stored cross-site scripting (XSS) vulnerability…
• CVE-2022-23113 - CVSS 4.3 (medium), 2022-01-12: Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal…