27 matches found
PT-2023-19618 · Jenkins · Jenkins Bearychat Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins BearyChat Plugin versions 3.0.2 and earlier Description: A cross-site request forgery CSRF issue allows attackers to connect to an attacker-specified URL. Recommendations: For Jenkins BearyChat Plugin versions 3.0.2 and earlier, updat...
CVE-2023-24459
A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2023-24459
The CVE-2023-24459 entry affects the Jenkins BearyChat Plugin (versions 3.0.2 and earlier). The root cause is a missing permission check in a form-validation path within the plugin, allowing attackers with Overall/Read permission to cause the plugin to connect to an attacker-specified URL. The vu...
CVE-2023-24458
A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...
CVE-2023-24458
CVE-2023-24458 is a CSRF vulnerability in the Jenkins BearyChat Plugin (versions 3.0.2 and earlier). The issue arises in a form-validation path, allowing an attacker with Overall/Read permission to cause the Jenkins controller to connect to an attacker‑specified URL. The linked documents corrobor...
