1 matches found
Missing permission check in mcp-server allows reading Pipeline replay scripts
mcp-server 0.177.v629fdb2557fe and earlier does not perform a permission check in the getReplayScripts MCP tool that returns the replay script of a Pipeline build. This allows attackers with Item/Read permission to obtain the Pipeline script of jobs. mcp-server 0.178.vffe5ae770f3b requires...
4.3CVSS5.9AI score0.00281EPSS
SaveExploits0Affected Software1
20