Lucene search

K
osvGoogleOSV:GHSA-M5WP-P3GJ-7Q5G
HistoryFeb 16, 2022 - 12:01 a.m.

Missing Authorization in Jenkins dbCharts Plugin

2022-02-1600:01:16
Google
osv.dev
14

0.001 Low

EPSS

Percentile

37.2%

A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified database via JDBC using attacker-specified credentials.

CPENameOperatorVersion
org.jenkins-ci.plugins:dbchartseq0.5.2

0.001 Low

EPSS

Percentile

37.2%

Related for OSV:GHSA-M5WP-P3GJ-7Q5G