Search for packages
| purl | pkg:rpm/redhat/jenkins-2-plugins@4.13.1686680473-1?arch=el8 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4qvq-xv22-xbed
Aliases: CVE-2022-30954 GHSA-5m4q-x28v-q6wp |
Missing Authorization Jenkins Blue Ocean Plugin 1.25.3 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server. | There are no reported fixed by versions. |
|
VCID-j584-bgww-z7fw
Aliases: CVE-2022-29599 GHSA-rhgr-952r-6p8q |
Command injection in Apache Maven maven-shared-utils In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks. | There are no reported fixed by versions. |
|
VCID-qq1f-3nsz-6kcz
Aliases: CVE-2023-1436 GHSA-q6g2-g7f3-rr83 |
Jettison vulnerable to infinite recursion An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown. | There are no reported fixed by versions. |
|
VCID-xq5k-dyk9-u3ct
Aliases: CVE-2022-30953 GHSA-hgpq-42pf-9vfq |
Cross Site Request Forgery in Jenkins Blue Ocean Plugin A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server. Blue Ocean Plugin 1.25.4 requires POST requests and the appropriate permissions for the affected HTTP endpoints. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:06:43.204830+00:00 | RedHat Importer | Affected by | VCID-j584-bgww-z7fw | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-29599.json | 38.0.0 |
| 2026-04-01T13:58:29.597174+00:00 | RedHat Importer | Affected by | VCID-4qvq-xv22-xbed | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-30954.json | 38.0.0 |
| 2026-04-01T13:58:29.448044+00:00 | RedHat Importer | Affected by | VCID-xq5k-dyk9-u3ct | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-30953.json | 38.0.0 |
| 2026-04-01T13:54:41.326638+00:00 | RedHat Importer | Affected by | VCID-qq1f-3nsz-6kcz | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-1436.json | 38.0.0 |