jenkins_sonargraph_integration

unspecified

OTHER 1 CVE

3.0.0

SEMANTIC 1 CVE

5.0.1

SEMANTIC 1 CVE

0

SINGLE_NUMBER 1 CVE

CVE-2023-35145

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in a stored cross-site scripting vulnerability exploitable by attackers with Item/Configure permission.

UNKNOWN Jun 14, 2023

CVE-2020-2201

Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site scripting vulnerability.

UNKNOWN Jul 02, 2020