Semantic Versioning (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2023-01-26. Vendor: Jenkins.

CVEs of Semantic Versioning

• CVE-2023-24430 - CVSS 9.8 (critical), 2023-01-26: Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
• CVE-2023-24429 - CVSS 9.8 (critical), 2023-01-26: Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about…
• CVE-2022-27201 - CVSS 6.5 (medium), 2022-03-15: Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about…