Display security warnings on the plugins site. ... security advisory announcing unresolved security issues. ... Script SCM ( scriptscm ): SECURITY-461.
May 17, 2022 · This vulnerability allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver. This form validation method no ...
Oct 19, 2022 · This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create Pipelines. Pipeline: Supporting APIs ...
Feb 15, 2022 · This allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM ...
Missing: web | Show results with:web
Jan 12, 2022 · This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission. Matrix Project ...
Apr 9, 2024 · Creating global roles, such as admin, job creator, anonymous, etc., allowing to set Overall, Agent, Job, Run, View and SCM permissions on a ...
What do plugins need to do to protect web methods? Identify the operations in code that can be potentially security sensitive. This includes anything that ...
Missing: scm | Show results with:scm
May 13, 2022 · This plugin uses Probely to scan your web application for security vulnerabilities. It enables security testing in your CI/CD pipeline.
Apr 12, 2022 · ... legacySCM(scm)) ). This allows attackers able to submit pull requests (or equivalent), but not able to commit directly to the configured SCM ...
Jul 26, 2023 · Description: Qualys Web App Scanning Connector Plugin 2.0.10 and earlier does not correctly perform permission checks in several HTTP endpoints.