jenkins_pipeline:_build_step

2.13.1

SEMANTIC 1 CVE

2.15

MAJOR_MINOR 1 CVE

unspecified

OTHER 2 CVEs

2.18

MAJOR_MINOR 1 CVE

CVE-2023-25762

Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.

UNKNOWN Feb 15, 2023

CVE-2022-25184

Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipeline script using the Pipeline Snippet Generator, allowing attackers with Item/Read permission to retrieve the default password parameter value from jobs.

UNKNOWN Feb 15, 2022