Jenkins Deployer Framework — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Deployer Framework, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-36889 — CVSS 8.8 (high): Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the application path of the applications when configuring…
• CVE-2020-2227 — CVSS 5.4 (medium): Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored…
• CVE-2022-36890 — CVSS 4.3 (medium): Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation…
• CVE-2022-36891 — CVSS 4.3 (medium): A missing permission check in Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier allows attackers with Item/Read permission but…