Jenkins Pipeline Phoenix Autotest Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-03-29. Vendor: Jenkins Project.

CVEs of Jenkins Pipeline Phoenix Autotest Plugin

• CVE-2022-28158 - CVSS 6.5 (medium), 2022-03-29: A missing permission check in Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Overall/Read permission to enumerate credentials…
• CVE-2022-28157 - CVSS 6.5 (medium), 2022-03-29: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins…
• CVE-2022-28156 - CVSS 6.5 (medium), 2022-03-29: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the…
• CVE-2022-28155 - CVSS 8.1 (high), 2022-03-29: Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.