1 matches found
Jenkins MCP Server Plugin missing a permission check
Jenkins MCP Server Plugin 0.177.v629fdb2557fe and earlier does not perform a permission check in the getReplayScripts MCP tool that returns the replay script of a Pipeline build. This allows attackers with Item/Read permission to obtain the Pipeline script of jobs. MCP Server Plugin...
4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References5Affected Software1
20