Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/build-publisher@1.22
purl pkg:maven/org.jenkins-ci.plugins/build-publisher@1.22
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.6
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-phr4-94xx-259m
Aliases:
CVE-2022-41232
Jenkins build-publisher plugin vulnerable to cross-site request forgery A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and … There are no reported fixed by versions.
GHSA-3jp6-q9cg-rvgj
Aliases:
CVE-2022-41230
Missing permission check in Jenkins build-publisher Plugin Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in … There are no reported fixed by versions.
GHSA-jrqh-c9v8-ccx9
Aliases:
CVE-2022-41231
Path traversal in Jenkins build-publisher Plugin Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-m3wv-fr8v-fmh7
Jenkins Build-Publisher plugin has Insufficiently Protected Credentials Jenkins Build-Publisher plugin version 1.21 and earlier stores credentials to other Jenkins instances … CVE-2017-1000387