Search for packages
| purl | pkg:maven/org.jvnet.hudson.plugins/monitoring@1.9.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-28y2-gqhb-k7ak
Aliases: CVE-2014-3678 GHSA-ghjw-fc9q-jj8c |
Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
Affected by 0 other vulnerabilities. |
|
VCID-dx1r-55e3-8kes
Aliases: CVE-2014-3679 GHSA-qwc3-p5pc-q93h |
Jenkins Monitoring Plugin Reveals Sensitive Information via Unspecified Pages The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages. |
Affected by 0 other vulnerabilities. |
|
VCID-p6uj-ac1z-nqe1
Aliases: CVE-2019-1003022 GHSA-hw83-jpxr-g225 |
Cross-Site Request Forgery (CSRF) A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||