Lucene search
+L

4 matches found

Mend
Mend
•added 2019/04/04 3:38 p.m.•5 views

CVE-2019-1003086

A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpldoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...

7.1CVSS0.01296EPSS
SaveExploits0References4
Mend
Mend
•added 2019/04/04 3:38 p.m.•5 views

CVE-2019-1003087

A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpldoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

7.1CVSS0.01508EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•7 views

CVE-2019-1003086: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpldoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...

6.5CVSS5.8AI score0.01296EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•8 views

CVE-2019-1003087: Missing Authorization

A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpldoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

6.5CVSS5.8AI score0.01508EPSS
SaveExploits0References2
Rows per page
Query Builder