Lucene search
PRIOn knowledge basePRION:CVE-2023-32992HistoryMay 16, 2023 - 5:15 p.m.
Design/Logic Flaw
2023-05-1617:15:00
PRIOn knowledge base
www.prio-n.com
6
logic flaw
saml
jenkins
security vulnerability
http request
xml parsing
Missing permission checks in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML, or parse a local file on the Jenkins controller as XML.
| CPE | Name | Operator | Version |
|---|---|---|---|
| saml_single_sign_on | le | 2.0.2 |
Related
cvelist
cvelist
CVE-2023-32992
2023-05-16 16:00:11
osv
osv
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
2023-05-16 18:30:16
github
github
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
2023-05-16 18:30:16
cve
cve
CVE-2023-32992
2023-05-16 17:15:11
nvd
nvd
CVE-2023-32992
2023-05-16 17:15:11
