Jenkins Paaslane Estimate Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-12-13. Vendor: Jenkins Project.

CVEs of Jenkins Paaslane Estimate Plugin

• CVE-2023-50776 - CVSS 4.3 (medium), 2023-12-13: Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where…
• CVE-2023-50779 - CVSS 4.3 (medium), 2023-12-13: Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to an…
• CVE-2023-50778 - CVSS 8.8 (high), 2023-12-13: A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified…
• CVE-2023-50777 - CVSS 4.3 (medium), 2023-12-13: Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the…