Jenkins Dotci Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-09-21. Vendor: Jenkins Project.

CVEs of Jenkins Dotci Plugin

• CVE-2022-41237 - CVSS 9.8 (critical), 2022-09-21: Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code…
• CVE-2022-41239 - CVSS 5.4 (medium), 2022-09-21: Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build…
• CVE-2022-41238 - CVSS 9.8 (critical), 2022-09-21: A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the…