Jenkins Dbcharts Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-03-15. Vendor: Jenkins Project.

CVEs of Jenkins Dbcharts Plugin

• CVE-2022-27216 - CVSS 6.5 (medium), 2022-03-15: Jenkins dbCharts Plugin 0.5.2 and earlier stores JDBC connection passwords unencrypted in its global configuration file on the Jenkins controller where they…
• CVE-2022-25206 - CVSS 8.8 (high), 2022-02-15: A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified database via…
• CVE-2022-25205 - CVSS 8.8 (high), 2022-02-15: A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to connect to an attacker-specified database…