2 matches found
CVE-2019-1003090
A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpldoValidate form validation method allows attackers to initiate a connection to an attacker-specified server...
6.5CVSS6.6AI score0.01296EPSS
SaveExploits0References1
Input validation
A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpldoValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...
4CVSS6.3AI score0.01459EPSS
SaveExploits0References3Affected Software1
20