CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2023/04/12 6:15 p.m.•19 views

CVE-2023-30529

Jenkins Lucene-Search Plugin 387.v938aecbf7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database...

4.3CVSS5.8AI score0.00349EPSS

SaveExploits0References2

NVD•added 2023/04/12 6:15 p.m.•42 views

CVE-2023-30529

Jenkins Lucene-Search Plugin 387.v938aecbf7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database...

4.3CVSS4.5AI score0.00349EPSS

SaveExploits0References2

Vulnrichment•added 2023/04/12 5:05 p.m.•9 views

CVE-2023-30529

Jenkins Lucene-Search Plugin 387.v938aecbf7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database...

7AI score0.00349EPSS

SaveExploits0References2

AlpineLinux•added 2023/04/12 5:05 p.m.•110 views

CVE-2023-30529

Jenkins Lucene-Search Plugin 387.v938aecbf7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database...

4.3CVSS5.6AI score0.00349EPSS

SaveExploits0References2

CVE•added 2023/04/12 5:05 p.m.•77 views

CVE-2023-30529

CVE-2023-30529 affects the Jenkins Lucene-Search Plugin (versions 387.v938a_ecb_f7fe9 and earlier). The underlying issue is that the plugin’s HTTP endpoint does not require POST requests, enabling cross-site request forgery that can be used to reindex the database. The accompanying sources consis...

4.3CVSS4.5AI score0.00349EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by