Jenkins Report Portal Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-04-12. Vendor: Jenkins Project.

CVEs of Jenkins Report Portal Plugin

• CVE-2023-30526 - CVSS 6.5 (medium), 2023-04-12: A missing permission check in Jenkins Report Portal Plugin 0.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified…
• CVE-2023-30525 - CVSS 8.8 (high), 2023-04-12: A cross-site request forgery (CSRF) vulnerability in Jenkins Report Portal Plugin 0.5 and earlier allows attackers to connect to an attacker-specified URL…
• CVE-2023-30524 - CVSS 4.3 (medium), 2023-04-12: Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for…
• CVE-2023-30523 - CVSS 4.3 (medium), 2023-04-12: Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its…