Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:30 p.m.18 views

CSRF vulnerability in Jenkins Maven Cascade Release Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin...

6.5CVSS6.2AI score0.0012EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/05/24 5:30 p.m.12 views

GHSA-WFPW-HQJG-58PH CSRF vulnerability in Jenkins Maven Cascade Release Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin...

6.5CVSS6.4AI score0.0012EPSS
Exploits0References4
NVD
NVD
added 2020/10/08 1:15 p.m.9 views

CVE-2020-2295

A cross-site request forgery CSRF vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin...

6.5CVSS0.0012EPSS
Exploits0References2
OSV
OSV
added 2020/10/08 1:15 p.m.16 views

CVE-2020-2295

A cross-site request forgery CSRF vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin...

6.5CVSS6.7AI score
Exploits0References2
Prion
Prion
added 2020/10/08 1:15 p.m.12 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin...

4.3CVSS6.4AI score0.0012EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/10/08 12:0 a.m.2 views

PT-2020-15524 · Jenkins · Jenkins Maven Cascade Release Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Maven Cascade Release Plugin versions 1.3.2 and earlier Description: The issue concerns a lack of permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds,...

6.5CVSS6.2AI score0.00231EPSS
Exploits0References6
Rows per page
Query Builder