Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Jenkins project

Jenkins project Jenkins Scriptler Plugin vulnerabilities

5 published CVEs name Jenkins project Jenkins Scriptler Plugin among the affected products.

Newest CVEs

  • CVE-2023-50765

    A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read the contents of a…

    Jenkins Project · Jenkins Scriptler Plugin

    Medium4.3
  • CVE-2023-50764

    Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing attackers with…

    Jenkins Project · Jenkins Scriptler Plugin

    High8.1
  • CVE-2021-21700

    Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site…

    Jenkins project · Jenkins Scriptler Plugin

    Medium5.4
  • CVE-2021-21668

    Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by…

    Jenkins project · Jenkins Scriptler Plugin

    Medium5.4
  • CVE-2021-21667

    Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms, resulting in a stored cross-site scripting (XSS)…

    Jenkins project · Jenkins Scriptler Plugin

    Medium5.4