Release (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 33 known versions, newest CVE from 2020-10-08. Vendor: Jenkins.

CVEs of Release

• CVE-2020-2292 - CVSS 5.4 (medium), 2020-10-08: Jenkins Release Plugin 2.10.2 and earlier does not escape the release version in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability…
• CVE-2018-1000013 - CVSS 8.8 (high), 2018-01-23: Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to…