Lucene search
+L

24 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-0346

Malicious code in bioql PyPI...

8.8CVSS7.5AI score0.00556EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-0355

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00717EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 3:21 a.m.•16 views

CVE-2023-24459

A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

6.5CVSS6.5AI score0.00717EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:21 a.m.•16 views

CVE-2023-24458

A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...

8.8CVSS6.7AI score0.00556EPSS
SaveExploits0References1
OSV
OSV
•added 2023/01/26 9:30 p.m.•58 views

GHSA-67W4-W877-JV29 Missing permission check in Jenkins BearyChat Plugin

A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

6.5CVSS6.4AI score0.00717EPSS
SaveExploits0References2
OSV
OSV
•added 2023/01/26 9:18 p.m.•25 views

CVE-2023-24458

A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...

8.8CVSS8.7AI score
SaveExploits0References1
NVD
NVD
•added 2023/01/26 9:18 p.m.•38 views

CVE-2023-24458

A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...

8.8CVSS8.7AI score0.00556EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/26 9:18 p.m.•23 views

CVE-2023-24459

A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

6.5CVSS6.3AI score0.00717EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/26 9:18 p.m.•23 views

Information disclosure

A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

4CVSS6.2AI score0.00717EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/01/26 9:18 p.m.•32 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...

6.8CVSS8.6AI score0.00556EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•18 views

Jenkins Plugin BearyChat 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.5AI score0.00717EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•19 views

Jenkins Plugin BearyChat 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

8.8CVSS7.8AI score0.00556EPSS
SaveExploits0References2
Mend
Mend
•added 2023/01/24 12:00 a.m.•6 views

CVE-2023-24458

A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...

8.8CVSS0.00556EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/24 12:00 a.m.•10 views

CVE-2023-24458

A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...

7AI score0.00556EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/01/24 12:00 a.m.•8 views

CVE-2023-24459

A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

6.9AI score0.00717EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/01/24 12:00 a.m.•67 views

CVE-2023-24458

A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...

8.9AI score0.00556EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/24 12:00 a.m.•8 views

PT-2023-19618 · Jenkins · Jenkins Bearychat Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins BearyChat Plugin versions 3.0.2 and earlier Description: A cross-site request forgery CSRF issue allows attackers to connect to an attacker-specified URL. Recommendations: For Jenkins BearyChat Plugin versions 3.0.2 and earlier, updat...

8.8CVSS8.5AI score0.00556EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/24 12:00 a.m.•6 views

CVE-2023-24458: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...

8.8CVSS5.7AI score0.00556EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/24 12:00 a.m.•3 views

CVE-2023-24459: Missing Authorization

A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

6.5CVSS5.8AI score0.00717EPSS
SaveExploits0References3
CVE
CVE
•added 2023/01/24 12:00 a.m.•96 views

CVE-2023-24458

CVE-2023-24458 is a CSRF vulnerability in the Jenkins BearyChat Plugin (versions 3.0.2 and earlier). The issue arises in a form-validation path, allowing an attacker with Overall/Read permission to cause the Jenkins controller to connect to an attacker‑specified URL. The linked documents corrobor...

8.8CVSS8.5AI score0.00556EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder