CVE-2022-25212

A cross-site request forgery CSRF vulnerability in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials...

CVE-2022-25212

CVE-2022-25212 : Jenkins SWAMP Plugin version 1.2.6 and earlier has a CSRF flaw that lets an attacker cause the Jenkins controller to connect to an attacker‑specified web server using attacker‑specified credentials. The issue is documented across NVD and security advisories (Nessus/OSV) and, as n...

CVE-2022-25211

A missing permission check in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server using attacker-specified credentials...

CVE-2022-25211

CVE-2022-25211 affects Jenkins SWAMP Plugin 1.2.6 and earlier. A missing permission check in a form-validation method lets attackers with Overall/Read connect to an attacker-specified URL using attacker-specified credentials, potentially capturing stored credentials. Exploitation details are not ...

Jenkins 插件 权限许可和访问控制问题漏洞

Jenkins plug-ins are plug-ins that provide functionality for Jenkins. The Jenkins SWAMP Plugin Access Control Error vulnerability can be exploited by an attacker to connect to the attacker's specified web server using the attacker's specified credentials...

Jenkins 插件 跨站请求伪造漏洞

Jenkins plug-ins are plug-ins that provide appropriate functionality for Jenkins. Jenkins SWAMP Plugin cross-site request forgery vulnerability. An attacker with general or read privileges can exploit this vulnerability to connect to a specified URL using a specified credential ID to capture...

PT-2022-17150 · Jenkins · Jenkins Swamp Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SWAMP Plugin versions 1.2.6 and earlier Description: A missing permission check in the Jenkins SWAMP Plugin allows attackers with Overall/Read permission to connect to an attacker-specified web server using attacker-specified...

PT-2022-17151 · Jenkins · Jenkins Swamp Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SWAMP Plugin versions 1.2.6 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified web server using attacker-specified credentials. The vulnerability is due to a...

Swamp 0.0.2 Remote File Inclusion

======================================================================== | Title : Swamp v0.0.2 File inclusion vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 10 FranASSais V.Pro | Version : v0.0.2 | Vendor : https://github.com/wcchandler/swamp | Dork :...

Swamp Attack - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Swamp Attack published at the 'play' market has multiple vulnerabilities...

Cross site scripting

Cross-site scripting XSS vulnerability in swamp/action/LoginActions aka the login box in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtaine...

CVE-2007-5702

Cross-site scripting XSS vulnerability in swamp/action/LoginActions aka the login box in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtaine...

CVE-2007-5702

Cross-site scripting XSS vulnerability in swamp/action/LoginActions aka the login box in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtaine...

CVE-2007-5702

CVE-2007-5702 covers a Cross-site Scripting (XSS) vulnerability in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x, specifically in the login component swamp/action/LoginActions (the login box). The vulnerability arises from improper handling of the username paramete...

Novell OpenSUSE SWAMP multiple XSS

Vendor Site: http://en.opensuse.org/Swamp Version affected: ??? Demo:http://swampdemo.suse.de/webswamp/swamp/template/Index.vm Class: Input Validation Error Overview:OpenSUSE Workflow Administration and Management Platform login page fails to sufficiently sanitize user-supplied input data via log...