Lucene search
K

20 matches found

CNVD
CNVD
added 2022/03/31 12:0 a.m.21 views

Jenkins JiraTestResultReporter Plugin授权问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins JiraTestResultReporter Plugin...

4.3CVSS1.6AI score0.00102EPSS
Exploits0References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.19 views

Jenkins JiraTestResultReporter Plugin跨站请求伪造漏洞

Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier versions are vulnerable to cross-site request forgery, which stems from a...

8.8CVSS1.9AI score0.00074EPSS
Exploits0References1
OSV
OSV
added 2022/03/30 12:0 a.m.27 views

GHSA-VQCX-JW4R-6FP3 CSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter Plugin

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin version 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS8.6AI score0.00074EPSS
Exploits0References5
OSV
OSV
added 2022/03/30 12:0 a.m.21 views

GHSA-GC7M-X2CJ-3775 Missing permission check in Jenkins JiraTestResultReporter Plugin

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS4.7AI score0.00102EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/03/30 12:0 a.m.19 views

Missing permission check in Jenkins JiraTestResultReporter Plugin

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS4.6AI score0.00102EPSS
Exploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/03/30 12:0 a.m.29 views

CSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter Plugin

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin version 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS8.7AI score0.00074EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2022/03/29 1:15 p.m.12 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS0.00074EPSS
Exploits0References2
OSV
OSV
added 2022/03/29 1:15 p.m.14 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS6.7AI score
Exploits0References2
NVD
NVD
added 2022/03/29 1:15 p.m.12 views

CVE-2022-28137

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS0.00102EPSS
Exploits0References2
Prion
Prion
added 2022/03/29 1:15 p.m.11 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

6.8CVSS8.7AI score0.00074EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/03/29 1:15 p.m.10 views

Design/Logic Flaw

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4CVSS4.4AI score0.00102EPSS
Exploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2022/03/29 12:30 p.m.67 views

CVE-2022-28137

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS4.3AI score0.00102EPSS
Exploits0References2
CVE
CVE
added 2022/03/29 12:30 p.m.124 views

CVE-2022-28137

The CVE-2022-28137 entry refers to Jenkins JiraTestResultReporter Plugin, version 165.v817928553942 and earlier, with a missing permission check that allows attackers holding Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials. Affected component: ...

4.3CVSS4.3AI score0.00102EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/03/29 12:30 p.m.13 views

CVE-2022-28137

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

5.2AI score0.00102EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/03/29 12:30 p.m.18 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.9AI score0.00074EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/03/29 12:30 p.m.16 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

6.7AI score0.00074EPSS
Exploits0References2
CVE
CVE
added 2022/03/29 12:30 p.m.101 views

CVE-2022-28136

The CVE-2022-28136 case refers to a CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier. The issue allows an attacker to connect to an attacker‑specified URL using attacker‑specified credentials, describing a cross‑site request forgery that can initiate outbo...

8.8CVSS8.6AI score0.00074EPSS
Exploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2022/03/29 12:30 p.m.55 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS4.7AI score0.00074EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.2 views

Jenkins JiraTestResultReporter Plugin 跨站请求伪造漏洞

Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier versions are vulnerable to cross-site request forgery, which stems from a...

8.8CVSS5.4AI score0.00074EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.3 views

Jenkins JiraTestResultReporter Plugin 访问控制错误漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins JiraTestResultReporter Plugin...

4.3CVSS5.7AI score0.00102EPSS
Exploits0References5
Rows per page
Query Builder