Lucene search
+L

7 matches found

OSV
OSV
•added 2022/05/24 4:44 p.m.•66 views

GHSA-VVFJ-P4JF-J8RM Missing permission check in Jenkins Static Analysis Utilities Plugin

A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationViewdoSave form handler method allowed attackers with Overall/Read permission to change the per-job default graph configuration for all users...

6.5CVSS5.9AI score0.01508EPSS
SaveExploits0References6
OSV
OSV
•added 2019/04/30 1:29 p.m.•34 views

CVE-2019-10308

A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationViewdoSave form handler method allowed attackers with Overall/Read permission to change the per-job default graph configuration for all users...

6.5CVSS6.6AI score
SaveExploits0References3
NVD
NVD
•added 2019/04/30 1:29 p.m.•28 views

CVE-2019-10307

A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationViewdoSave form handler method allowed attackers to change the per-job default graph configuration for all users...

6.5CVSS6.4AI score0.01007EPSS
SaveExploits0References3
OSV
OSV
•added 2019/04/30 1:29 p.m.•35 views

CVE-2019-10307

A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationViewdoSave form handler method allowed attackers to change the per-job default graph configuration for all users...

6.5CVSS6.9AI score
SaveExploits0References3
Prion
Prion
•added 2019/04/30 1:29 p.m.•32 views

Cross site request forgery (csrf)

A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationViewdoSave form handler method allowed attackers to change the per-job default graph configuration for all users...

4.3CVSS6.3AI score0.01007EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2019/04/30 12:25 p.m.•6 views

CVE-2019-10307

A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationViewdoSave form handler method allowed attackers to change the per-job default graph configuration for all users...

7.1CVSS0.01007EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/30 12:00 a.m.•7 views

CVE-2019-10307: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationViewdoSave form handler method allowed attackers to change the per-job default graph configuration for all users...

6.5CVSS5.7AI score0.01007EPSS
SaveExploits0References2
Rows per page
Query Builder