S3 Publisher (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2021-05-11. Vendor: Jenkins.

CVEs of S3 Publisher

• CVE-2021-21650 - CVSS 4.3 (medium), 2021-05-11: Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers…
• CVE-2021-21651 - CVSS 4.3 (medium), 2021-05-11: Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to…
• CVE-2020-2114 - CVSS 7.5 (high), 2020-02-12: Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially…
• CVE-2018-1000177 - CVSS 5.4 (medium), 2018-05-08: A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in…