Jenkins Maven Release Plugin (Jenkins Project) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-12-17. Vendor: Jenkins Project.

CVEs of Jenkins Maven Release Plugin

• CVE-2019-16550 - CVSS 8.8 (high), 2019-12-17: A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have…
• CVE-2019-16549 - CVSS 8.1 (high), 2019-12-17: Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks, allowing man-in-the-middle…
• CVE-2019-10361 - CVSS 5.5 (medium), 2019-07-31: Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the…
• CVE-2019-10360 - CVSS 5.4 (medium), 2019-07-31: A stored cross site scripting vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier allowed attackers to inject arbitrary HTML and JavaScript in…
• CVE-2019-10359 - CVSS 6.3 (medium), 2019-07-31: A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to…