Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58425
HistoryJul 04, 2022 - 12:00 a.m.

Jenkins Plugin requests-plugin授权问题漏洞

2022-07-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

22.2%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Plugin requests-plugin version 2.2.16 and earlier are vulnerable to an authorization issue that stems from improper permission checking. An attacker with global (read) privileges could exploit this vulnerability to view a list of pending requests.

0.001 Low

EPSS

Percentile

22.2%

Related for CNVD-2022-58425