CVE-2023-37959

A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

CVE-2023-37959

A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

CVE-2023-37959

CVE-2023-37959 affects Jenkins Sumologic Publisher Plugin (versions 2.2.1 and earlier). The root cause is a missing permission check in a form-validation method, enabling attackers with Overall/Read permission to connect to an attacker-specified URL. Some sources additionally describe CSRF risk b...