CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Mend•added 2019/04/18 4:54 p.m.•6 views

CVE-2019-10301

A missing permission check in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfigdoTestConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another...

8.8CVSS0.01348EPSS

SaveExploits0References5

Mend•added 2019/04/18 4:54 p.m.•9 views

CVE-2019-10300

A cross-site request forgery vulnerability in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfigdoTestConnection form validation method allowed attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing...

8.6CVSS0.0133EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2019/04/18 12:00 a.m.•14 views

CVE-2019-10300: Cross-Site Request Forgery (CSRF)

8CVSS5.7AI score0.0133EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/04/18 12:00 a.m.•11 views

CVE-2019-10301: Missing Authorization

8.8CVSS5.8AI score0.01348EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by