CVE-2025-64137

A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server...

CVE-2025-64137

The Jenkins Themis Plugin (version 1.4.1 and earlier) is vulnerable to Missing Authorization due to a lack of permission checks in an HTTP endpoint. Attackers with Overall/Read permission can exploit this to connect to an attacker-specified URL. Furthermore, the endpoint does not require POST req...