3 matches found
CVE-2023-37959
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
6.5CVSS0.00548EPSS
SaveExploits0References2
CVE-2023-37959
CVE-2023-37959 affects Jenkins Sumologic Publisher Plugin (versions 2.2.1 and earlier). The root cause is a missing permission check in a form-validation method, enabling attackers with Overall/Read permission to connect to an attacker-specified URL. Some sources additionally describe CSRF risk b...
6.5CVSS6.3AI score0.00548EPSS
SaveExploits0References2Affected Software1
20