65 matches found
Missing permission checks in xml-job-to-job-dsl
xml-job-to-job-dsl 0.1.13 and earlier does not perform permission checks, and makes its functionality available to users lacking Overall/Read permission. While only jobs the user has Item/Read permission for will be accessible, it does not require Item/Extended Read permission to convert their...
6.5CVSS5.5AI score0.00161EPSS
SaveExploits0Affected Software1
20