Promoted Builds

promoted_builds

Vendor: Jenkins • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-30965 1Jenkins 1Promoted Builds Jun 17, 2026 May 17, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name and description of Promotion Level parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerabilit...Show more Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name and description of Promotion Level parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-29049 1Jenkins 1Promoted Builds Jun 17, 2026 Apr 12, 2022 N/A· v4 5.4 MEDIUM· v3 4.0 MEDIUM· v2 Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an u...Show more Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name.Show less
CVE-2022-29045 1Jenkins 1Promoted Builds Jun 17, 2026 Apr 12, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build parameters on views displaying parameters, resulting in a stored cross-site scripti...Show more Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2021-21641 1Jenkins 1Promoted Builds Jun 17, 2026 Apr 7, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.
CVE-2018-1000114 1Jenkins 1Promoted Builds Nov 21, 2024 Mar 13, 2018 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.