Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2025/10/29 3:31 p.m.•32 views

GHSA-MRPQ-9JR3-RQQ9 Jenkins MCP Server Plugin does not perform permission checks in multiple MCP tools

Jenkins MCP Server Plugin 0.84.v50ca24ef83f2 and earlier does not perform permission checks in several MCP tools. This allows to do the following: - Attackers with Item/Read permission can obtain information about the configured SCM in a job despite lacking Item/Extended Read permission getJobScm...

5.4CVSS5.9AI score0.00262EPSS
SaveExploits0References5
Rows per page
Query Builder