Jenkins Project Jenkins Warnings Next Generation Plugin

• CVE-2022-23107 Unrated Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Configure permission to write and read specific 1.9%
• CVE-2021-21626 Unrated Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Wor 0.9%