CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2022/03/29 1:15 p.m.•28 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS0.00717EPSS

SaveExploits0References2

Cvelist•added 2022/03/29 12:30 p.m.•38 views

CVE-2022-28136

8.9AI score0.00717EPSS

SaveExploits0References2

CVE•added 2022/03/29 12:30 p.m.•124 views

CVE-2022-28136

The CVE-2022-28136 case refers to a CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier. The issue allows an attacker to connect to an attacker‑specified URL using attacker‑specified credentials, describing a cross‑site request forgery that can initiate outbo...

8.8CVSS8.6AI score0.00717EPSS

SaveExploits0References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2022/03/29 12:00 a.m.•2 views

CVE-2022-28136: Cross-Site Request Forgery (CSRF)

8.8CVSS7.8AI score0.00717EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2022/03/29 12:00 a.m.•4 views

CVE-2022-28137: Missing Authorization

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS5.5AI score0.00743EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by