Jenkins Pipeline Input Step Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-10-19. Vendor: Jenkins Project.

CVEs of Jenkins Pipeline Input Step Plugin

• CVE-2022-43407 - CVSS 8.8 (high), 2022-10-19: Jenkins Pipeline: Input Step Plugin 451.vf1a_a_4f405289 and earlier does not restrict or sanitize the optionally specified ID of the 'input' step, which is…
• CVE-2022-34177 - CVSS 7.5 (high), 2022-06-23: Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for Pipeline `input` steps on the…