Information disclosure

A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

Design/Logic Flaw

JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials...

Information disclosure

xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java...