Known vulnerabilities in Job Configuration History 1227.v7a_79fc4dc01f
Vendor:
Jenkins
Software:
Job Configuration History
Version:
1227.v7a_79fc4dc01f
Software CPE:
cpe:2.3:a:jenkins:job_configuration_history:*:*:*:*:*:*:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
1367.vc8fa_b_15101dc
1356.ve360da_6c523a_
1229.v3039470161a_d
1227.v7a_79fc4dc01f
1166.vc9f255f45b_8a
1165.v8cc9fd1f4597
1156.v536a_97b_8d649
1155.v28a_46a_cc06a_5
-
2.31
2.30
2.29
2.28.1
2.28
2.27
2.26
2.25
2.24
2.23.1
2.23
2.22
2.21
2.20
2.19
2.18.3
2.18.2
2.18.1
2.18
2.17
2.16
2.15
2.14
2.13
2.12
2.11
2.10
2.9
2.8
2.6
2.5
2.4
2.3
2.2
2.1.1
2.1
2.0
1.13
1.12
1.11
1.10
1.9
1.8
1.7
1.6
1.5
1.4
1.3
1.2
1.1
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU80527 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-41933 |
CWE-611 | Medium | 1229.v3039470161a_d | 07.09.2023 |
SB2023090735 |
||
| #VU80526 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-41932 |
CWE-22 | Medium | 1229.v3039470161a_d | 07.09.2023 |
SB2023090735 |
||
| #VU80525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-41931 |
CWE-79 | Low | 1229.v3039470161a_d | 07.09.2023 |
SB2023090735 |
||
| #VU80524 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-41930 |
CWE-22 | Medium | 1229.v3039470161a_d | 07.09.2023 |
SB2023090735 |