Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.groupon.jenkins-ci.plugins/DotCi@2.40.00
purl pkg:maven/com.groupon.jenkins-ci.plugins/DotCi@2.40.00
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-q9g4-9fx4-v533
Aliases:
CVE-2022-41239
Stored XSS vulnerability in Jenkins DotCi Plugin DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter … There are no reported fixed by versions.
GHSA-x3jj-rgw9-7r5g
Aliases:
CVE-2022-41237
RCE vulnerability in Jenkins DotCi Plugin DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the … There are no reported fixed by versions.
GHSA-9mc6-vgmq-x6xf
Aliases:
CVE-2022-41238
Lack of authentication mechanism in Jenkins DotCi Plugin webhook DotCi Plugin provides a webhook endpoint at `/githook/` that can be … There are no reported fixed by versions.
This package is not known to fix any advisories.