jenkins_xebialabs_xl_deploy

7.5.8

SEMANTIC 1 CVE

7.5.6

SEMANTIC 1 CVE

7.5.9

SEMANTIC 1 CVE

unspecified

OTHER 4 CVEs

10.0.1

SEMANTIC 3 CVEs

all versions as of 2019-04-17

DATE_BASED 2 CVEs

CVE-2021-21665

A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.

UNKNOWN Jun 10, 2021

CVE-2021-21664

An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.

UNKNOWN Jun 10, 2021

CVE-2021-21663

A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.

UNKNOWN Jun 10, 2021

CVE-2021-21662

A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.

UNKNOWN Jun 10, 2021