Jenkins Job And Node Ownership — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Job And Node Ownership, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-28150 — CVSS 8.8 (high): A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change…
• CVE-2018-1000107 — CVSS 6.5 (medium): An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java…
• CVE-2022-28149 — CVSS 5.4 (medium): Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in a stored…
• CVE-2022-28151 — CVSS 4.3 (medium): A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change…
• CVE-2022-28152 — CVSS 4.3 (medium): A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore…