Jenkins Project Jenkins Xpath Configuration Viewer Plugin vulnerabilities

3 known vulnerabilities affecting jenkins_project/jenkins_xpath_configuration_viewer_plugin.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2022-34813MEDIUMCVSS 4.3≥ unspecified, ≤ 1.1.12022-06-30

CVE-2022-34813 [MEDIUM] CWE-862 CVE-2022-34813: A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows att A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to create and delete XPath expressions.

CVE-2022-34811MEDIUMCVSS 4.3≥ unspecified, ≤ 1.1.12022-06-30

CVE-2022-34811 [MEDIUM] CWE-862 CVE-2022-34811: A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows att A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to access the XPath Configuration Viewer page.

CVE-2022-34812MEDIUMCVSS 4.3≥ unspecified, ≤ 1.1.12022-06-30

CVE-2022-34812 [MEDIUM] CWE-352 CVE-2022-34812: A cross-site request forgery (CSRF) vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 A cross-site request forgery (CSRF) vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers to create and delete XPath expressions.