Jenkins Pipeline: Input Step Plugin vulnerabilities

2 known vulnerabilities in Jenkins Pipeline: Input Step Plugin from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Jenkins Pipeline: Input Step Plugin: Cross-Site Request Forgery

  CVE-2022-43407Oct 19, 2022Jenkins

  Jenkins Pipeline: Input Step Plugin 451.vf1a_a_4f405289 and earlier does not restrict or sanitize the optionally specified ID of the 'input' step, which is used for the URLs that process user interactions for the given 'input' step (proceed or abort) and is no

• 7.5 High severity

  Jenkins Pipeline: Input Step Plugin: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-34177Jun 23, 2022JenkinsEPSS 1.72%

  Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for Pipeline `input` steps on the controller as part of build metadata, using the parameter name without sanitization as a relative path inside a