Known vulnerabilities in AWS CodeCommit Trigger

Vendor: Jenkins
Software: AWS CodeCommit Trigger
Software CPE: cpe:2.3:a:jenkins:aws_codecommit_trigger:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AWS CodeCommit Trigger AWS CodeCommit Trigger is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80538 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-41944		 CWE-79 Low
No
No
 - 07.09.2023 SB2023090759
#VU80537 - Permissions, Privileges, and Access Controls
CVE-2023-41943		 CWE-264 Medium
No
No
 - 07.09.2023 SB2023090759
#VU80536 - Cross-Site Request Forgery (CSRF)
CVE-2023-41942		 CWE-352 Low
No
No
 - 07.09.2023 SB2023090759
#VU80535 - Permissions, Privileges, and Access Controls
CVE-2023-41941		 CWE-264 Low
No
No
 - 07.09.2023 SB2023090759
#VU77491 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-35147		 CWE-22 Medium
No
No
 - 16.06.2023 SB2023061645