Jenkins 360 Fireline Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-10-19. Vendor: Jenkins Project.

CVEs of Jenkins 360 Fireline Plugin

• CVE-2022-43435 - CVSS 5.3 (medium), 2022-10-19: Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived…
• CVE-2019-10466 - CVSS 8.1 (high), 2019-10-23: An XML external entities (XXE) vulnerability in Jenkins 360 FireLine Plugin allows attackers with Overall/Read access to have Jenkins resolve external…