jenkins_build_failure_analyzer

1.27.0

SEMANTIC 1 CVE

unspecified

OTHER 4 CVEs

1.24.1

SEMANTIC 3 CVEs

2.4.1

SEMANTIC 4 CVEs

0

SINGLE_NUMBER 4 CVEs

CVE-2023-43502

A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to delete Failure Causes.

UNKNOWN Sep 20, 2023

CVE-2023-43501

A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.

UNKNOWN Sep 20, 2023

CVE-2023-43500

A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.

UNKNOWN Sep 20, 2023

CVE-2023-43499

Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes.

UNKNOWN Sep 20, 2023