Known vulnerabilities in Publish Over SSH

Vendor: Jenkins
Software: Publish Over SSH
Software CPE: cpe:2.3:a:jenkins:publish_over_ssh:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Publish Over SSH Publish Over SSH is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59608 - Cleartext Storage of Sensitive Information
CVE-2022-23114		 CWE-312 Low
No
No
 - 14.01.2022 SB2022011406
#VU59607 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-23113		 CWE-22 Medium
No
No
 - 14.01.2022 SB2022011406
#VU59606 - Permissions, Privileges, and Access Controls
CVE-2022-23112		 CWE-264 Medium
No
No
 - 14.01.2022 SB2022011406
#VU59605 - Cross-Site Request Forgery (CSRF)
CVE-2022-23111		 CWE-352 Low
No
No
 - 14.01.2022 SB2022011406
#VU59604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23110		 CWE-79 Low
No
No
 - 14.01.2022 SB2022011406