netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-3g9q-cmgv-g4p6
GHSA-38hw-368m-7jmg
GHSA-36fg-whr2-g999
This commit is contained in:
advisory-database[bot]
2024-01-04 12:10:31 +00:00
parent 357858a2b2
commit e7553c0ed0
3 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/11/GHSA-3g9q-cmgv-g4p6/GHSA-3g9q-cmgv-g4p6.json
+4
View File
@@ -43,6 +43,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-45381"
},
{
"type": "WEB",
"url": "https://github.com/jenkinsci/pipeline-utility-steps-plugin/commit/01be8ac0045027128fc1e9cf3a8b0709d08291ea"
},
{
"type": "PACKAGE",
"url": "https://github.com/jenkinsci/pipeline-utility-steps-plugin"
advisories/github-reviewed/2023/05/GHSA-38hw-368m-7jmg/GHSA-38hw-368m-7jmg.json
+4
View File
@@ -40,6 +40,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32982"
},
{
"type": "WEB",
"url": "https://github.com/jenkinsci/ansible-plugin/commit/4cbc48657c21a65a917b3b3049918480198c0cfb"
},
{
"type": "WEB",
"url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017"
advisories/github-reviewed/2023/08/GHSA-36fg-whr2-g999/GHSA-36fg-whr2-g999.json
+7 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-36fg-whr2-g999",
"modified": "2023-08-16T21:13:10Z",
"modified": "2024-01-04T12:09:17Z",
"published": "2023-08-16T15:30:18Z",
"aliases": [
"CVE-2023-40340"
],
"summary": "Jenkins NodeJS Plugin improper credential masking vulnerability",
"details": "Jenkins NodeJS Plugin integrates with Config File Provider Plugin to specify custom NPM settings, including credentials for authentication, in a Npm config file.\n\nNodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build logs.\n\nNodeJS Plugin 1.6.0.1 masks credentials specified in the Npm config file in Pipeline build logs.",
"details": "Jenkins NodeJS Plugin integrates with Config File Provider Plugin to specify custom NPM settings, including credentials for authentication, in a Npm config file.\n\nNodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build logs.\n\nNodeJS Plugin 1.6.1 masks credentials specified in the Npm config file in Pipeline build logs.",
"severity": [
{
"type": "CVSS_V3",
@@ -28,7 +28,7 @@
"introduced": "0"
},
{
"fixed": "1.6.0.1"
"fixed": "1.6.1"
}
]
}
@@ -40,6 +40,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40340"
},
{
"type": "WEB",
"url": "https://github.com/jenkinsci/nodejs-plugin/commit/a2198feb53765f0b1f063b1827e90473a60a25a0"
},
{
"type": "WEB",
"url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3196"