CVEs (5)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Jenkins 1Job And Node Ownership Jun 17, 2026 Mar 29, 2022 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job. |
1Jenkins 1Job And Node Ownership Jun 17, 2026 Mar 29, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job. |
1Jenkins 1Job And Node Ownership Jun 17, 2026 Mar 29, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change the owners and item-specific permissions of a job. |
1Jenkins 1Job And Node Ownership Jun 17, 2026 Mar 29, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure perm...Show more |
1Jenkins 1Job And Node Ownership Nov 21, 2024 Mar 13, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Jo...Show more |