Lucene search

K
osvGoogleOSV:GHSA-2Q7J-52XG-X8FM
HistoryMay 24, 2022 - 5:22 p.m.

Missing permission checks in Zephyr for JIRA Test Management Plugin

2022-05-2417:22:20
Google
osv.dev
10
zephyr
jira
permission checks
http server
security vulnerability

EPSS

0.001

Percentile

22.0%

A missing permission check in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified username and password.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-2Q7J-52XG-X8FM