Jenkins Dotci
By the Year
In 2023 there have been 0 vulnerabilities in Jenkins Dotci . Last year Dotci had 3 security vulnerabilities published. Right now, Dotci is on track to have less security vulnerabilities in 2023 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2023 | 0 | 0.00 |
| 2022 | 3 | 8.33 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Dotci vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Jenkins Dotci Security Vulnerabilities
Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause
CVE-2022-41239
5.4 - Medium
- September 21, 2022
Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.
XSS
A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier
CVE-2022-41238
9.8 - Critical
- September 21, 2022
A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.
AuthZ
Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types
CVE-2022-41237
9.8 - Critical
- September 21, 2022
Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Jenkins Dotci or by Jenkins? Click the Watch button to subscribe.
