Lucene search
GoogleOSV:GHSA-PWRM-8MVM-P2F2HistoryMay 13, 2022 - 1:50 a.m.
Jenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checks
2022-05-1301:50:55
Google
osv.dev
3
jenkins
agiletestware
pangolin
connector
testrail
plugin
csrf
vulnerability
missing permission checks
data modification
A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin’s configuration by sending crafted HTTP requests to an unprotected endpoint.
Related
nvd
nvd
CVE-2018-1999032
2018-08-01 13:29:00
cve
cve
CVE-2018-1999032
2018-08-01 13:29:00
cvelist
cvelist
CVE-2018-1999032
2018-08-01 13:00:00
prion
prion
Design/Logic Flaw
2018-08-01 13:29:00
osv
osv
CVE-2018-1999032
2018-08-01 13:29:00
github
github