Lucene search

K
osvGoogleOSV:GHSA-C9PX-7J36-F35V
HistoryMay 13, 2022 - 1:48 a.m.

CSRF vulnerability and missing permission checks in Jenkins AbsInt Astrée Plugin

2022-05-1301:48:34
Google
osv.dev
2
jenkins
csrf vulnerability
missing permission checks
absint astrée plugin
command execution
security
software

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

42.7%

A command execution vulnerability exists in Jenkins Absint Astree Plugin 1.0.5 and older in AstreeBuilder.java that allows attackers with Overall/Read access to execute a command on the Jenkins master.

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

42.7%

Related for OSV:GHSA-C9PX-7J36-F35V