Lucene search
+L

2 matches found

OSV
OSV
added 2022/05/13 1:31 a.m.64 views

GHSA-WHF8-3H58-2W9F Jenkins Warnings Next Generation Plugin cross-site request forgery vulnerability

Jenkins Warnings Next Generation Plugin has a form validation HTTP endpoint used to validate a Groovy script through compilation, which was not subject to sandbox protection. The endpoint checked for the Overall/RunScripts permission, but did not require POST requests, so it was vulnerable to...

8.8CVSS9AI score0.01151EPSS
SaveExploits0References2
Rows per page
Query Builder