jenkins-2-plugins

Direct Vulnerabilities

Known vulnerabilities in the jenkins-2-plugins package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Improper Validation of Specified Quantity in Input	*
M Out-of-bounds Read	*
M Information Exposure	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improper Certificate Validation	*
M Comparison of Incompatible Types	*
M Allocation of Resources Without Limits or Throttling	*
M Creation of Temporary File in Directory with Incorrect Permissions	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Unchecked Input for Loop Condition	*
H Incorrect Implementation of Authentication Algorithm	*
M Inefficient Regular Expression Complexity	*
H Improper Certificate Validation	*
H Use of a Risky Cryptographic Primitive	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Allocation of Resources Without Limits or Throttling	*
H Excessive Platform Resource Consumption within a Loop	*
M Unchecked Input for Loop Condition	*
H Incomplete Blacklist	*
H Resource Exhaustion	*
H Expired Pointer Dereference	*
H Inefficient Regular Expression Complexity	*
H Improper Verification of Cryptographic Signature	*
H Out-of-bounds Read	*
H Out-of-bounds Read	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Expired Pointer Dereference	*
H Out-of-bounds Read	*
H Use After Free	*
H Out-of-bounds Read	*
M Improper Validation of Specified Type of Input	*
M Deserialization of Untrusted Data	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Server-Side Request Forgery (SSRF)	*
H Excessive Platform Resource Consumption within a Loop	*
H Allocation of Resources Without Limits or Throttling	*
M Inappropriate Encoding for Output Context	*
H Arbitrary Argument Injection	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Validation of Unsafe Equivalence in Input	*
M CVE-2023-32262	*
M CVE-2023-32262	*
M CVE-2023-32262	*
M CVE-2023-32261	*
M CVE-2023-32261	*
M CVE-2023-32261	*
H Allocation of Resources Without Limits or Throttling	*
L Deserialization of Untrusted Data	*
H Unchecked Input for Loop Condition	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Validation of Specified Type of Input	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Excessive Platform Resource Consumption within a Loop	*
M Deserialization of Untrusted Data	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Insufficient Granularity of Access Control	*
H Deserialization of Untrusted Data	*
M Authorization Bypass Through User-Controlled Key	*
H Expression Language Injection	*
M Directory Traversal	*
M Direct Request ('Forced Browsing')	*
M Improper Verification of Source of a Communication Channel	*
M Link Following	*
L Deserialization of Untrusted Data	*
L Deserialization of Untrusted Data	*
L Deserialization of Untrusted Data	*
H Missing Required Cryptographic Step	*
M Direct Request ('Forced Browsing')	*
H LDAP Injection	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Verification of Cryptographic Signature	*
H Use of a Broken or Risky Cryptographic Algorithm	*
L Deserialization of Untrusted Data	*
H Directory Traversal	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Cross-site Scripting (XSS)	*
L Uncontrolled Recursion	*
M Information Exposure	*
M XML External Entity (XXE) Injection	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Deserialization of Untrusted Data	*
H Resource Exhaustion	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Directory Traversal	*
M Deserialization of Untrusted Data	*
M Deserialization of Untrusted Data	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
H Deserialization of Untrusted Data	*
M Deserialization of Untrusted Data	*
M Deserialization of Untrusted Data	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Out-of-bounds Write	*
H Deserialization of Untrusted Data	*
M Files or Directories Accessible to External Parties	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M CVE-2022-33980	*
M CVE-2022-33980	*
L Insufficiently Protected Credentials	*
L Insufficiently Protected Credentials	*
L Race Condition	*
L Race Condition	*
L Incorrect Permission Assignment for Critical Resource	*
L Incorrect Permission Assignment for Critical Resource	*
L Improper Output Neutralization for Logs	*
L Improper Output Neutralization for Logs	*
M Stack-based Buffer Overflow	*
M Stack-based Buffer Overflow	*
M Missing Authentication for Critical Function	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
L Out-of-bounds Write	*
L Out-of-bounds Write	*
L Out-of-bounds Write	*
L Out-of-bounds Write	*
M Insufficient Entropy	*
M Uncontrolled Recursion	*
M Uncontrolled Recursion	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Improper Input Validation	*
M Improper Input Validation	*
M Information Exposure	*
M Improper Validation of Integrity Check Value	*
M Deserialization of Untrusted Data	*
H Resource Exhaustion	*
H Uncontrolled Recursion	*
M Arbitrary Code Injection	*
H Improper Verification of Cryptographic Signature	*
H Improper Verification of Cryptographic Signature	*
L Cross-site Scripting (XSS)	*
L Information Exposure	*
L Information Exposure	*
M Improper Access Control	*
M Improper Access Control	*
M Trust Boundary Violation	*
M Trust Boundary Violation	*
M Directory Traversal	*
M Directory Traversal	*
M Cross-site Request Forgery (CSRF)	*
M Cross-site Request Forgery (CSRF)	*
M Origin Validation Error	*
M Origin Validation Error	*
M Cross-site Request Forgery (CSRF)	*
M Cross-site Request Forgery (CSRF)	*
M Cross-site Request Forgery (CSRF)	*
M Cross-site Request Forgery (CSRF)	*
M Direct Request ('Forced Browsing')	*
M Direct Request ('Forced Browsing')	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
M Cross-site Request Forgery (CSRF)	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Plaintext Storage of a Password	*
M Plaintext Storage of a Password	*
M Improper Output Neutralization for Logs	*
M Improper Output Neutralization for Logs	*
H Static Code Injection	*
H Static Code Injection	*
H Static Code Injection	*
H Static Code Injection	*
H Improper Input Validation	*
H Improper Input Validation	*
H Improper Input Validation	*
H Improper Input Validation	*
H Static Code Injection	*
H Static Code Injection	*
H Static Code Injection	*
M Cross-site Scripting (XSS)	*
M Improper Check for Dropped Privileges	*
M Improper Check for Dropped Privileges	*
H Static Code Injection	*
H Static Code Injection	*
H Static Code Injection	*
H Static Code Injection	*
M Static Code Injection	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Request Forgery (CSRF)	*
M Cross-site Scripting (XSS)	*
H Directory Traversal	*
H Interaction Error	*
M Cross-site Scripting (XSS)	*
H Key Exchange without Entity Authentication	*
H Arbitrary Code Injection	*
M Information Exposure	*
M Information Exposure	*
M Missing Authorization	*
M Information Exposure	*
M Cross-site Request Forgery (CSRF)	*
M Insufficient Granularity of Access Control	*
M Cross-site Request Forgery (CSRF)	*
H Directory Traversal	*
H Directory Traversal	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Information Exposure	*
H Reversible One-Way Hash	*
H Reversible One-Way Hash	*
C Protection Mechanism Failure	*
C Protection Mechanism Failure	*
C Protection Mechanism Failure	*
M Cross-site Scripting (XSS)	*
C Protection Mechanism Failure	*
C Protection Mechanism Failure	*
M Missing Authorization	*
M Cross-site Request Forgery (CSRF)	*
M Out-of-bounds Write	*
H Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
C Protection Mechanism Failure	*
H Improper Input Validation	*
M Open Redirect	*
M Open Redirect	*
H Session Fixation	*
H Session Fixation	*
M Information Exposure	*
H Inappropriate Encoding for Output Context	*
M Cross-site Scripting (XSS)	*
M Information Exposure	*
M Information Exposure	*
M Cross-site Request Forgery (CSRF)	*
M Cross-site Request Forgery (CSRF)	*
H Cross-site Request Forgery (CSRF)	*
H Cross-site Request Forgery (CSRF)	*
M CVE-2023-40339	*
M CVE-2023-40339	*
M Cross-site Request Forgery (CSRF)	*
H Improper Input Validation	*
H Arbitrary Argument Injection	*
M Directory Traversal	*
H Protection Mechanism Failure	*
H Protection Mechanism Failure	*

Vulnerability

Vulnerable Version

Improper Validation of Specified Quantity in Input