pkg:maven/org.jenkins-ci.plugins/aws-codecommit-trigger

Type maven

Namespace org.jenkins-ci.plugins

Name aws-codecommit-trigger

Known advisories, vulnerabilities and fixes for org.jenkins-ci.plugins/aws-codecommit-trigger package.

Repository: https://mvnrepository.com/artifact/org.jenkins-ci.plugins/aws-codecommit-trigger

Moderate 5

Medium 4

Type	Version	Distribution	# CVEs	# Advisory ID	Title	Severity	Published
Affected	<= 3.0.12		CVE-2023-35147	JENKINS:SECURITY-3099	Arbitrary file read vulnerability in `aws-codecommit-trigger`	medium	2023-06-14T00:00:00 (15 months ago)
Affected	<= 3.0.12		CVE-2023-41941	JENKINS:SECURITY-3101-1	Missing permission check in `aws-codecommit-trigger` allows enumerating credentials IDs	medium	2023-09-06T00:00:00 (12 months ago)
Affected	<= 3.0.12		CVE-2023-41942 CVE-2023-41943	JENKINS:SECURITY-3101-2	CSRF vulnerability and missing permission check in `aws-codecommit-trigger`	medium	2023-09-06T00:00:00 (12 months ago)
Affected	<= 3.0.12		CVE-2023-41944	JENKINS:SECURITY-3102	HTML injection vulnerability in `aws-codecommit-trigger`	medium	2023-09-06T00:00:00 (12 months ago)
Affected	<= 3.0.12		CVE-2023-41942	MAVEN:GHSA-997J-37H7-MHG9	CSRF vulnerability in Jenkins AWS CodeCommit Trigger Plugin	moderate	2023-09-06T15:30:26 (12 months ago)
Affected	<= 3.0.12		CVE-2023-41944	MAVEN:GHSA-G4QF-5523-7WVF	HTML injection vulnerability in Jenkins AWS CodeCommit Trigger Plugin	moderate	2023-09-06T15:30:26 (12 months ago)
Affected	<= 3.0.12		CVE-2023-41941	MAVEN:GHSA-PFG6-CJ3J-RPV4	Missing permission check in Jenkins AWS CodeCommit Trigger Plugin allows enumerating credentials IDs	moderate	2023-09-06T15:30:26 (12 months ago)
Affected	<= 3.0.12		CVE-2023-41943	MAVEN:GHSA-R428-G373-M2H4	Missing permission check in Jenkins AWS CodeCommit Trigger Plugin	moderate	2023-09-06T15:30:26 (12 months ago)
Affected	<= 3.0.12		CVE-2023-35147	MAVEN:GHSA-WHGJ-6M78-2GG9	Arbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger Plugin	moderate	2023-06-14T15:30:37 (15 months ago)