Lucene search

K
osvGoogleOSV:GHSA-Q5WM-QGXJ-H9PH
HistoryMay 13, 2022 - 1:15 a.m.

Missing permission check in Jenkins Kmap Plugin allow SSRF

2022-05-1301:15:05
Google
osv.dev
1

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

Related for OSV:GHSA-Q5WM-QGXJ-H9PH