Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-50767
HistoryDec 13, 2023 - 6:15 p.m.

Design/Logic Flaw

2023-12-1318:15:00
PRIOn knowledge base
www.prio-n.com
4
security flaw
jenkins
nexus plugin
http request
xml parsing
permission check

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.4%

Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML.

CPENameOperatorVersion
nexus_platformeq<= 3.18.0-3

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.4%

Related for PRION:CVE-2023-50767