PatchTheCVEbuild failure analyzer vulnerabilities and fixes
Recent CVEs affecting build failure analyzer, with upgrade or downgrade steps. 10 tracked.
Also searched as: buildfailureanalyzer.
build failure analyzer has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2023-09-20. Highest priority: CVE-2019-16553 (score 44/100).
- CVE-2023-43502 MEDIUM 4.3 UPGRADE A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier a
- CVE-2023-43501 MEDIUM 6.5 UPGRADE A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Ov
- CVE-2023-43500 HIGH 8.8 UPGRADE A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier a
- CVE-2023-43499 MEDIUM 5.4 UPGRADE Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, res
- CVE-2020-2244 MEDIUM 5.4 UPGRADE Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation re
- CVE-2019-16555 MEDIUM 6.5 UPGRADE A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed i
- CVE-2019-16554 MEDIUM 4.3 UPGRADE A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with O
- CVE-2019-16553 HIGH 8.8 UPGRADE A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows
- CVE-2016-4988 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows
- CVE-2013-6374 LOW 3.5 UPGRADE Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows
FAQ
How do I fix build failure analyzer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is build failure analyzer being exploited right now?
None of the tracked build failure analyzer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which build failure analyzer CVE should I patch first?
CVE-2019-16553 currently ranks highest (44/100): A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows .