Skip to content

Releases: jenkinsci/appspider-build-scanner-plugin

1.0.17

06 Mar 16:08
Compare
Choose a tag to compare

🔒 Security

Fix SECURITY-3144.

1.0.16

26 Jan 16:28
9f0ad9f
Compare
Choose a tag to compare

What's Changed

Full Changelog: jenkinsci-appspider-plugin-1.0.15...jenkinsci-appspider-plugin-1.0.16

1.0.15

30 May 10:19
Compare
Choose a tag to compare

Changes

  • Jenkins version requirement change to 2.348 to address security concerns
  • report name changed to use . rather than _ for consistency
  • minor bug fixes and security fixes addressed by upgrading dependencies

1.0.14

09 Mar 09:59
Compare
Choose a tag to compare

Changes

  • multi-client/system-administrator support added, requiring AppSpider Enterprise 3.8.227 or above
  • new check box in global settings to enable multi-client/system-administrator support, enabling it will add this support but no longer be compatible with older versions of AppSpider Enterprise

1.0.13

02 Nov 10:48
Compare
Choose a tag to compare

Description

Addressed the following security issue

SECURITY-2058 / CVE-2020-2314

AppSpider Plugin 1.0.12 and earlier stores a password unencrypted in its global configuration file com.rapid7.jenkinspider.PostBuildScan.xml on the Jenkins controller as part of its configuration.

This password can be viewed by users with access to the Jenkins controller file system.

AppSpider Plugin 1.0.13 stores a password encrypted once its configuration is saved again.

v1.0.12

09 Jul 10:25
Compare
Choose a tag to compare
  • added configuration option to allow self-signed certificate errors to be ignored when using HTTPS
  • additional logging to aid in diagnosis of issues
  • minor stability improvements