Jenkins Convert To Pipeline Plugin vulnerabilities

2 known vulnerabilities in Jenkins Convert To Pipeline Plugin from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Jenkins Convert To Pipeline Plugin: Improper Neutralization of Special Elements used in a Command

  CVE-2023-28677Apr 2, 2023Jenkins

  Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and Post-build Actions to the equivalent Pipeline step invocations, allowing attackers able to configure Freestyle

• 8.8 High severity

  Jenkins Convert To Pipeline Plugin: Cross-Site Request Forgery

  CVE-2023-28676Apr 2, 2023Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers to create a Pipeline based on a Freestyle project, potentially leading to remote code execution (RCE).