org.jvnet.hudson.plugins:dry@1.4 vulnerabilities
latest version
2.12
first published
16 years ago
latest version published
13 years ago
licenses detected
- (BSD-2-Clause OR LGPL-3.0 OR MIT)[1.0,2.0)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.jvnet.hudson.plugins:dry package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.jvnet.hudson.plugins:dry is a plug-in that generates reports of duplicated code in a project. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the custom Details view of the Static Analysis Utilities based DRY Plugin. An attacker can insert arbitrary HTML into this view by influencing the input to the plugin. How to fix Cross-site Scripting (XSS)? Upgrade | [,2.49) |
org.jvnet.hudson.plugins:dry is a Jenkins dry plugin. Affected version of this package are vulnerable to XML External Entity (XXE) Injection in files it parses as part of the build process. It allows attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks. How to fix XML External Entity (XXE) Injection? Upgrade | [,2.5) |