Non notée
CVE-2020-2306 A missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overall/Read permission to…
Description
A missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overall/Read permission to obtain a list of names of configured Mercurial installations.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Mercurial Plugin 2.11 | premières → 2.11 | Pas de correctif indiqué |
| Jenkins Mercurial Plugin 2.10 | premières → < 2.10.1 | 2.10.1 |
| Jenkins Mercurial Plugin 2.9 | premières → < 2.9.1 | 2.9.1 |
| Jenkins Mercurial Plugin 2.8 | premières → < 2.8.1 | 2.8.1 |
Autres CVE de Jenkins Mercurial Plugin
Les 4 CVE de Jenkins Mercurial Plugin →
CVE-2022-43410
Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or…
5.3
Moyenne
CVE-2022-30948
Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM…
Non notée
CVE-2020-2305
Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks
Non notée