Jenkins Project Jenkins Liquibase Runner Plugin vulnerabilities
3 known vulnerabilities affecting jenkins_project/jenkins_liquibase_runner_plugin.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2020-2284HIGHCVSS 7.1≥ unspecified, ≤ 1.4.52020-09-23
CVE-2020-2284 [HIGH] CWE-611 CVE-2020-2284: Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML e
Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
cvelistv5nvd
CVE-2020-2285MEDIUMCVSS 4.3≥ unspecified, ≤ 1.4.72020-09-23
CVE-2020-2285 [MEDIUM] CWE-862 CVE-2020-2285: A missing permission check in Jenkins Liquibase Runner Plugin 1.4.7 and earlier allows attackers wit
A missing permission check in Jenkins Liquibase Runner Plugin 1.4.7 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
cvelistv5nvd
CVE-2020-2283MEDIUMCVSS 5.4≥ unspecified, ≤ 1.4.52020-09-23
CVE-2020-2283 [MEDIUM] CWE-79 CVE-2020-2283: Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not escape changeset contents, resulting in a
Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not escape changeset contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control changeset files evaluated by the plugin.
cvelistv5nvd