Filtered by vendor Jenkins
Subscriptions
Filtered by product Debian Package Builder
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-23118 | 1 Jenkins | 1 Debian Package Builder | 2023-11-30 | 8.8 High |
| Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller. | ||||
| CVE-2020-2125 | 1 Jenkins | 1 Debian Package Builder | 2023-10-25 | 4.3 Medium |
| Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system. | ||||
Page 1 of 1.