Medium
CVE-2022-43424
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2022-43433
Content-Security-Policy protection for user content disabled by Jenkins ScreenRecorder Plugin
High
CVE-2022-43432
Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin
High
CVE-2022-43425
Stored XSS vulnerability in Jenkins Custom Checkbox Parameter Plugin
Medium
CVE-2022-43421
Jenkins Tuleap Git Branch Source Plugin allows unauthenticated attackers to trigger Tuleap projects whose configured repo matches attacker-specified value
Low
CVE-2022-43412
Non-constant time webhook token comparison in Jenkins Generic Webhook Trigger Plugin
Critical
CVE-2022-43403
Jenkins Script Security Plugin sandbox bypass vulnerability
High
CVE-2022-43406
Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
High
CVE-2022-43405
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin
High
CVE-2022-43404
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
Critical
CVE-2022-43402
Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution
High
CVE-2022-43401
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
Low
CVE-2022-43426
AWS secrets displayed without masking by Jenkins S3 Explorer Plugin
High
CVE-2022-43408
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins
High
CVE-2022-43430
XXE vulnerability in Jenkins Compuware Topaz for Total Test Plugin
Medium
CVE-2022-43427
Jenkins Compuware Topaz for Total Test Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
Medium
CVE-2022-43422
Agent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin
High
CVE-2022-43420
Stored XSS vulnerability in Jenkins Contrast Continuous Application Security Plugin
High
CVE-2022-43415
XXE vulnerability in Jenkins REPO Plugin
Medium
CVE-2022-43410
Webhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin
Medium
CVE-2022-43419
API keys stored in plain text by Jenkins Katalon Plugin
High
CVE-2022-43434
Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin
High
CVE-2022-43416
Jenkins Katalon Plugin vulnerable to Protection Mechanism Failure
High
CVE-2022-43435
Content-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.