Jenkins Project Jenkins Semantic Versioning Plugin vulnerabilities
3 known vulnerabilities affecting jenkins_project/jenkins_semantic_versioning_plugin.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2023-24429P3CRITICALCVSS 9.8≥ unspecified, ≤ 1.142023-01-26
CVE-2023-24429 [CRITICAL] CWE-611 CVE-2023-24429: Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/age
Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkin
nvd
CVE-2023-24430P3CRITICALCVSS 9.8≥ unspecified, ≤ 1.142023-01-26
CVE-2023-24430 [CRITICAL] CWE-611 CVE-2023-24430: Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML
Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
nvd
CVE-2022-27201P3MEDIUMCVSS 6.5≥ unspecified, ≤ 1.132022-03-15
CVE-2022-27201 [MEDIUM] CVE-2022-27201: Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/age
Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controll
nvd