Deployer Framework

deployer_framework

Vendor: Jenkins • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-36891 1Jenkins 1Deployer Framework Jun 17, 2026 Jul 27, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 A missing permission check in Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier allows attackers with Item/Read permission but without Deploy Now/Deploy permission to read deployment logs.
CVE-2022-36890 1Jenkins 1Deployer Framework Jun 17, 2026 Jul 27, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation, allowing attackers with Item/Read permission to check for the existence of an at...Show more Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation, allowing attackers with Item/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.Show less
CVE-2022-36889 1Jenkins 1Deployer Framework Jun 17, 2026 Jul 27, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the application path of the applications when configuring a deployment, allowing attackers with Item/Configure permission to upload arbitra...Show more Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the application path of the applications when configuring a deployment, allowing attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller file system to the selected service.Show less
CVE-2020-2227 1Jenkins 1Deployer Framework Jun 17, 2026 Jul 15, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored cross-site scripting vulnerability.