rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-2117 
A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Pipeline GitHub Notify Step Plugin
Published: 2020-02-12T14:35:43.000Z
CVE-2020-2118 
A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Pipeline GitHub Notify Step Plugin
Published: 2020-02-12T14:35:44.000Z
CVE-2020-2119 
Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Azure AD Plugin
Published: 2020-02-12T14:35:44.000Z
CVE-2020-2120 
Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.
Affected products: vendor: Jenkins project
product: Jenkins FitNesse Plugin
Published: 2020-02-12T14:35:44.000Z
CVE-2020-2121 
Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Google Kubernetes Engine Plugin
Published: 2020-02-12T14:35:45.000Z
CVE-2020-2122 
Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data.
Affected products: vendor: Jenkins project
product: Jenkins Brakeman Plugin
Published: 2020-02-12T14:35:45.000Z
CVE-2020-2123 
Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins RadarGun Plugin
Published: 2020-02-12T14:35:46.000Z
CVE-2020-2124 
Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Dynamic Extended Choice Parameter Plugin
Published: 2020-02-12T14:35:46.000Z
CVE-2020-2125 
Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Debian Package Builder Plugin
Published: 2020-02-12T14:35:47.000Z
CVE-2020-2126 
Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins master where it can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins DigitalOcean Plugin
Published: 2020-02-12T14:35:47.000Z
CVE-2020-2127 
Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins BMC Release Package and Deployment Plugin
Published: 2020-02-12T14:35:47.000Z
CVE-2020-2128 
Jenkins ECX Copy Data Management Plugin 1.9 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins ECX Copy Data Management Plugin
Published: 2020-02-12T14:35:48.000Z
CVE-2020-2129 
Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Eagle Tester Plugin
Published: 2020-02-12T14:35:48.000Z
CVE-2020-2130 
Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Harvest SCM Plugin
Published: 2020-02-12T14:35:49.000Z
CVE-2020-2131 
Jenkins Harvest SCM Plugin 0.5.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Harvest SCM Plugin
Published: 2020-02-12T14:35:49.000Z
CVE-2020-2132 
Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Parasoft Environment Manager Plugin
Published: 2020-02-12T14:35:49.000Z
CVE-2020-2133 
Jenkins Applatix Plugin 1.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Applatix Plugin
Published: 2020-02-12T14:35:50.000Z
CVE-2020-2134 
Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies.
Affected products: vendor: Jenkins project
product: Jenkins Script Security Plugin
Published: 2020-03-09T15:00:56.000Z
CVE-2020-2135 
Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted method calls on objects that implement GroovyInterceptable.
Affected products: vendor: Jenkins project
product: Jenkins Script Security Plugin
Published: 2020-03-09T15:00:56.000Z
CVE-2020-2136 
Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Git Plugin
Published: 2020-03-09T15:00:57.000Z
CVE-2020-2137 
Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.
Affected products: vendor: Jenkins project
product: Jenkins Timestamper Plugin
Published: 2020-03-09T15:00:57.000Z
CVE-2020-2138 
Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products: vendor: Jenkins project
product: Jenkins Cobertura Plugin
Published: 2020-03-09T15:00:57.000Z
CVE-2020-2139 
An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.
Affected products: vendor: Jenkins project
product: Jenkins Cobertura Plugin
Published: 2020-03-09T15:00:58.000Z
CVE-2020-2140 
Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Audit Trail Plugin
Published: 2020-03-09T15:00:58.000Z
CVE-2020-2141 
A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce.
Affected products: vendor: Jenkins project
product: Jenkins P4 Plugin
Published: 2020-03-09T15:00:59.000Z
CVE-2020-2142 
A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds.
Affected products: vendor: Jenkins project
product: Jenkins P4 Plugin
Published: 2020-03-09T15:00:59.000Z
CVE-2020-2143 
Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Logstash Plugin
Published: 2020-03-09T15:00:59.000Z
CVE-2020-2144 
Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products: vendor: Jenkins project
product: Jenkins Rundeck Plugin
Published: 2020-03-09T15:01:00.000Z
CVE-2020-2145 
Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system.
Affected products: vendor: Jenkins project
product: Jenkins Zephyr Enterprise Test Management Plugin
Published: 2020-03-09T15:01:00.000Z
CVE-2020-2146 
Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks.
Affected products: vendor: Jenkins project
product: Jenkins Mac Plugin
Published: 2020-03-09T15:01:01.000Z
CVE-2020-2147 
A cross-site request forgery vulnerability in Jenkins Mac Plugin 1.1.0 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins Mac Plugin
Published: 2020-03-09T15:01:01.000Z
CVE-2020-2148 
A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins Mac Plugin
Published: 2020-03-09T15:01:02.000Z
CVE-2020-2149 
Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Repository Connector Plugin
Published: 2020-03-09T15:01:02.000Z
CVE-2020-2150 
Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Sonar Quality Gates Plugin
Published: 2020-03-09T15:01:02.000Z
CVE-2020-2151 
Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Quality Gates Plugin
Published: 2020-03-09T15:01:03.000Z
CVE-2020-2152 
Jenkins Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field form validation, resulting in a reflected cross-site scripting vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Subversion Release Manager Plugin
Published: 2020-03-09T15:01:03.000Z
CVE-2020-2153 
Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Backlog Plugin
Published: 2020-03-09T15:01:04.000Z
CVE-2020-2154 
Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system.
Affected products: vendor: Jenkins project
product: Jenkins Zephyr for JIRA Test Management Plugin
Published: 2020-03-09T15:01:04.000Z
CVE-2020-2155 
Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins OpenShift Deployer Plugin
Published: 2020-03-09T15:01:05.000Z
CVE-2020-2156 
Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins DeployHub Plugin
Published: 2020-03-09T15:01:05.000Z
CVE-2020-2157 
Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Skytap Cloud CI Plugin
Published: 2020-03-09T15:01:05.000Z
CVE-2020-2158 
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Literate Plugin
Published: 2020-03-09T15:01:06.000Z
CVE-2020-2159 
Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins CryptoMove Plugin
Published: 2020-03-09T15:01:06.000Z
CVE-2020-2160 
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF protection of any target URL.
Affected products: vendor: Jenkins project
product: Jenkins
Published: 2020-03-25T16:05:34.000Z
CVE-2020-2161 
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form validation for label expressions on job configuration pages, resulting in a stored XSS vulnerability exploitable by users able to define node labels.
Affected products: vendor: Jenkins project
product: Jenkins
Published: 2020-03-25T16:05:34.000Z
CVE-2020-2162 
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as file parameters to a build, resulting in a stored XSS vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins
Published: 2020-03-25T16:05:35.000Z
CVE-2020-2163 
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column headers.
Affected products: vendor: Jenkins project
product: Jenkins
Published: 2020-03-25T16:05:35.000Z
CVE-2020-2164 
Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Artifactory Plugin
Published: 2020-03-25T16:05:36.000Z
CVE-2020-2165 
Jenkins Artifactory Plugin 3.6.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Artifactory Plugin
Published: 2020-03-25T16:05:36.000Z
CVE-2020-2166 
Jenkins Pipeline: AWS Steps Plugin 1.40 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Pipeline: AWS Steps Plugin
Published: 2020-03-25T16:05:37.000Z
CVE-2020-2167 
Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins OpenShift Pipeline Plugin
Published: 2020-03-25T16:05:37.000Z
CVE-2020-2168 
Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Azure Container Service Plugin
Published: 2020-03-25T16:05:37.000Z
CVE-2020-2169 
A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter displayed in an error message, resulting in a reflected XSS vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Queue cleanup Plugin
Published: 2020-03-25T16:05:38.000Z
CVE-2020-2170 
Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote server, resulting in a stored XSS vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins RapidDeploy Plugin
Published: 2020-03-25T16:05:38.000Z
CVE-2020-2171 
Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products: vendor: Jenkins project
product: Jenkins RapidDeploy Plugin
Published: 2020-03-25T16:05:39.000Z
CVE-2020-2172 
Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products: vendor: Jenkins project
product: Jenkins Code Coverage API Plugin
Published: 2020-04-07T12:25:23.000Z
CVE-2020-2173 
Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content.
Affected products: vendor: Jenkins project
product: Jenkins Gatling Plugin
Published: 2020-04-07T12:25:24.000Z
CVE-2020-2174 
Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins AWSEB Deployment Plugin
Published: 2020-04-07T12:25:24.000Z
CVE-2020-2175 
Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control the XML input files processed by the plugin.
Affected products: vendor: Jenkins project
product: Jenkins FitNesse Plugin
Published: 2020-04-07T12:25:25.000Z
CVE-2020-2176 
Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to control the values returned from the useMango service.
Affected products: vendor: Jenkins project
product: Jenkins useMango Runner Plugin
Published: 2020-04-07T12:25:25.000Z
CVE-2020-2177 
Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Copr Plugin
Published: 2020-04-16T13:35:16.000Z
CVE-2020-2178 
Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products: vendor: Jenkins project
product: Jenkins Parasoft Findings Plugin
Published: 2020-04-16T13:35:16.000Z
CVE-2020-2179 
Jenkins Yaml Axis Plugin 0.2.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Yaml Axis Plugin
Published: 2020-04-16T13:35:17.000Z
CVE-2020-2180 
Jenkins AWS SAM Plugin 1.2.2 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins AWS SAM Plugin
Published: 2020-04-16T13:35:17.000Z
CVE-2020-2181 
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps.
Affected products: vendor: Jenkins project
product: Jenkins Credentials Binding Plugin
Published: 2020-05-06T12:45:22.000Z
CVE-2020-2182 
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.
Affected products: vendor: Jenkins project
product: Jenkins Credentials Binding Plugin
Published: 2020-05-06T12:45:23.000Z
CVE-2020-2183 
Jenkins Copy Artifact Plugin 1.43.1 and earlier performs improper permission checks, allowing attackers to copy artifacts from jobs they have no permission to access.
Affected products: vendor: Jenkins project
product: Jenkins Copy Artifact Plugin
Published: 2020-05-06T12:45:23.000Z
CVE-2020-2184 
A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipulate tags, and to connect to an attacker-specified URL.
Affected products: vendor: Jenkins project
product: Jenkins CVS Plugin
Published: 2020-05-06T12:45:23.000Z
CVE-2020-2185 
Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks.
Affected products: vendor: Jenkins project
product: Jenkins Amazon EC2 Plugin
Published: 2020-05-06T12:45:24.000Z
CVE-2020-2186 
A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.
Affected products: vendor: Jenkins project
product: Jenkins Amazon EC2 Plugin
Published: 2020-05-06T12:45:24.000Z
CVE-2020-2187 
Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostname validation, enabling man-in-the-middle attacks.
Affected products: vendor: Jenkins project
product: Jenkins Amazon EC2 Plugin
Published: 2020-05-06T12:45:25.000Z
CVE-2020-2188 
A missing permission check in Jenkins Amazon EC2 Plugin 1.50.1 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Amazon EC2 Plugin
Published: 2020-05-06T12:45:25.000Z
CVE-2020-2189 
Jenkins SCM Filter Jervis Plugin 0.2.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins SCM Filter Jervis Plugin
Published: 2020-05-06T12:45:26.000Z
CVE-2020-2190 
Jenkins Script Security Plugin 1.72 and earlier does not correctly escape pending or approved classpath entries on the In-process Script Approval page, resulting in a stored cross-site scripting vulnerability.
Affected products: vendor: Jenkins project
product: Jenkins Script Security Plugin
Published: 2020-06-03T12:40:23.000Z
CVE-2020-2191 
Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that allow adding and removing agent labels.
Affected products: vendor: Jenkins project
product: Jenkins Self-Organizing Swarm Plug-in Modules Plugin
Published: 2020-06-03T12:40:23.000Z
CVE-2020-2192 
A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels.
Affected products: vendor: Jenkins project
product: Jenkins Self-Organizing Swarm Plug-in Modules Plugin
Published: 2020-06-03T12:40:23.000Z