Lucene search
+L

12 matches found

NVD
NVD
•added 2022/03/29 1:15 p.m.•28 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS0.00717EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/29 1:15 p.m.•26 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS6.7AI score
SaveExploits0References2
Prion
Prion
•added 2022/03/29 1:15 p.m.•27 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

6.8CVSS8.7AI score0.00717EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/03/29 1:15 p.m.•17 views

Design/Logic Flaw

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4CVSS4.4AI score0.00743EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/03/29 12:30 p.m.•39 views

CVE-2022-28137

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

5.2AI score0.00743EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/29 12:30 p.m.•145 views

CVE-2022-28137

The CVE-2022-28137 entry refers to Jenkins JiraTestResultReporter Plugin, version 165.v817928553942 and earlier, with a missing permission check that allows attackers holding Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials. Affected component: ...

4.3CVSS4.3AI score0.00743EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/03/29 12:30 p.m.•38 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.9AI score0.00717EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2022/03/29 12:30 p.m.•72 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS4.7AI score0.00717EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/29 12:30 p.m.•124 views

CVE-2022-28136

The CVE-2022-28136 case refers to a CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier. The issue allows an attacker to connect to an attacker‑specified URL using attacker‑specified credentials, describing a cross‑site request forgery that can initiate outbo...

8.8CVSS8.6AI score0.00717EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•2 views

CVE-2022-28136: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS7.8AI score0.00717EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/03/29 12:00 a.m.•14 views

Jenkins JiraTestResultReporter Plugin 跨站请求伪造漏洞

Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier versions are vulnerable to cross-site request forgery, which stems from a...

8.8CVSS5.4AI score0.00717EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•4 views

CVE-2022-28137: Missing Authorization

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS5.5AI score0.00743EPSS
SaveExploits0References2
Rows per page
Query Builder