Jenkins Cloudbees Cd Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-10-25. Vendor: Jenkins Project.

CVEs of Jenkins Cloudbees Cd Plugin

• CVE-2023-46654 - CVSS 8.1 (high), 2023-10-25: Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup process of the…
• CVE-2023-46655 - CVSS 6.5 (medium), 2023-10-25: Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are published during the…
• CVE-2021-21647 - CVSS 4.3 (medium), 2021-04-21: Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to…