Lucene search

K
osvGoogleOSV:GHSA-2R46-CWGM-VVJX
HistoryMay 13, 2022 - 1:15 a.m.

Missing permission check in Jenkins jenkins-reviewbot Plugin

2022-05-1301:15:04
Google
osv.dev
6
jenkins
jenkins-reviewbot
permission check
form validation
connection
attacker-specified server
overall/read permission
reviewboarddescriptor

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

44.8%

A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

44.8%

Related for OSV:GHSA-2R46-CWGM-VVJX