pkg:Maven/org.jenkins-ci.plugins:config-file-provider

All known vulnerabilities

• HIGH8.1CVE-2021-21642XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin
  from 0, < 3.7.1
• HIGH8.1CVE-2018-1000414CSRF vulnerability in Config File Provider Plugin
  from 0, < 3.2
• MEDIUM6.5CVE-2021-21643Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs
  from 0, < 3.7.1
• MEDIUM6.5Improper Privilege Management in Jenkins Config File Provider Plugin
  from 0, < 2.16.2
• MEDIUM5.4CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files
  from 0, < 3.7.1
• MEDIUM5.4Stored XSS vulnerability in Config File Provider Plugin
  from 0, < 3.2
• MEDIUM4.8Jenkins Config File Provider Plugin XSS vulnerability
  from 0, < 3.5
• MEDIUM4.3Jenkins Config File Provider Plugin improper credential masking vulnerability
  from 0, < 953.v0432a
• MEDIUM4.3Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs
  from 0, < 3.7.1