Jenkins Static Analysis Utilities Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-11-04. Vendor: Jenkins Project.

CVEs of Jenkins Static Analysis Utilities Plugin

• CVE-2020-2316 - CVSS 5.4 (medium), 2020-11-04: Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS)…
• CVE-2019-10308 - CVSS 6.5 (medium), 2019-04-30: A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method…
• CVE-2019-10307 - CVSS 6.5 (medium), 2019-04-30: A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form…