Jenkins Xebialabs Xl Release vulnerabilities
3 known vulnerabilities affecting jenkins/xebialabs_xl_release.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2022-34780MEDIUMCVSS 6.5≤ 22.0.02022-06-30
CVE-2022-34780 [MEDIUM] CWE-352 CVE-2022-34780: A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Release Plugin 22.0.0 and
A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
nvd
CVE-2022-34781MEDIUMCVSS 6.5≤ 22.0.02022-06-30
CVE-2022-34781 [MEDIUM] CWE-862 CVE-2022-34781: Missing permission checks in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allow attackers
Missing permission checks in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
nvd
CVE-2022-34779MEDIUMCVSS 4.3fixed in 22.0.12022-06-30
CVE-2022-34779 [MEDIUM] CWE-862 CVE-2022-34779: A missing permission check in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows attacker
A missing permission check in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
nvd