Jenkins Convert To Pipeline Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-04-02. Vendor: Jenkins Project.

CVEs of Jenkins Convert To Pipeline Plugin

• CVE-2023-28677 - CVSS 9.8 (critical), 2023-04-02: Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and…
• CVE-2023-28676 - CVSS 8.8 (high), 2023-04-02: A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers to create a Pipeline based on a…