Jenkins Xebialabs Xl Deploy
By the Year
In 2023 there have been 0 vulnerabilities in Jenkins Xebialabs Xl Deploy . Xebialabs Xl Deploy did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 4 | 5.78 |
| 2020 | 0 | 0.00 |
| 2019 | 2 | 6.50 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Xebialabs Xl Deploy vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Jenkins Xebialabs Xl Deploy Security Vulnerabilities
A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier
CVE-2021-21665
8 - High
- June 10, 2021
A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.
Session Riding
An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier
CVE-2021-21664
6.5 - Medium
- June 10, 2021
An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.
AuthZ
A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier
CVE-2021-21663
4.3 - Medium
- June 10, 2021
A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.
AuthZ
A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier
CVE-2021-21662
4.3 - Medium
- June 10, 2021
A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.
AuthZ
A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method
CVE-2019-10304
6.5 - Medium
- April 18, 2019
A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.
Session Riding
A missing permission check in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method
CVE-2019-10305
6.5 - Medium
- April 18, 2019
A missing permission check in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Permissions, Privileges, and Access Controls
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Jenkins Xebialabs Xl Deploy or by Jenkins? Click the Watch button to subscribe.
