Lucene search
PRIOn knowledge basePRION:CVE-2023-41945HistorySep 06, 2023 - 1:15 p.m.
Code injection
2023-09-0613:15:00
PRIOn knowledge base
www.prio-n.com
6
jenkins
assembla
auth plugin
code injection
permissions
nvd
Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be granted Overall/Manage and Overall/SystemRead permissions, even if those permissions are disabled and should not be granted.
| CPE | Name | Operator | Version |
|---|---|---|---|
| assembla_auth | le | 1.14 |
Related
cvelist
cvelist
CVE-2023-41945
2023-09-06 12:09:02
osv
osv
Disabled permissions granted by Jenkins Assembla Auth Plugin
2023-09-06 15:30:26
cve
cve
CVE-2023-41945
2023-09-06 13:15:11
nvd
nvd
CVE-2023-41945
2023-09-06 13:15:11
github
github
Disabled permissions granted by Jenkins Assembla Auth Plugin
2023-09-06 15:30:26
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-09-06)
2023-09-07 00:00:00