4 matches found
Jenkins plugins Multiple Vulnerabilities (2024-05-02)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - High Script Security Plugin provides a sandbox feature that allows low privileged users to define scripts, including Pipelines, that are...
Cross site request forgery (csrf)
A cross-site request forgery CSRF vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build...
CVE-2024-28158
A cross-site request forgery (CSRF) vulnerability exists in the Jenkins Subversion Partial Release Manager Plugin version 1.0.1 and earlier . This flaw allows an attacker to trigger a build because the affected endpoint does not require POST requests. Additionally, a missing permission check in t...
