Lucene search
+L

4 matches found

NVD
NVD
•added 2019/06/11 2:29 p.m.•56 views

CVE-2019-10332

A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in ConfigurationdoTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS4.5AI score0.01829EPSS
SaveExploits0References3
OSV
OSV
•added 2019/06/11 2:29 p.m.•28 views

CVE-2019-10331

A cross-site request forgery vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier in ConfigurationdoTestConnection allowed attackers to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS6.6AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/11 12:00 a.m.•4 views

CVE-2019-10331: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier in ConfigurationdoTestConnection allowed attackers to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS5.7AI score0.01058EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/11 12:00 a.m.•4 views

CVE-2019-10332: Missing Authorization

A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in ConfigurationdoTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS5.7AI score0.01829EPSS
SaveExploits0References2
Rows per page
Query Builder