Lucene search
+L

9264 matches found

osv_ghsa
osv_ghsa
•added 2023/09/06 3:30 p.m.•67 views

GHSA-P986-HPR3-493P Missing permission checks in Jenkins Frugal Testing Plugin

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials...

4.3CVSS4.7AI score0.00448EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2023/09/06 3:30 p.m.•75 views

GHSA-G6RX-2W84-XMGJ CSRF vulnerability in Jenkins Frugal Testing Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the attacker-specified...

3.5CVSS4.1AI score0.00315EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2023/09/06 3:30 p.m.•46 views

CSRF vulnerability in Jenkins Frugal Testing Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the attacker-specified...

3.5CVSS6.7AI score0.00315EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2023/09/06 3:30 p.m.•44 views

Missing permission checks in Jenkins Frugal Testing Plugin

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials...

4.3CVSS6.6AI score0.00448EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/09/06 1:15 p.m.•33 views

CVE-2023-41947

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials...

4.3CVSS5.5AI score0.00448EPSS
SaveExploits0References2
NVD
NVD
•added 2023/09/06 1:15 p.m.•55 views

CVE-2023-41946

A cross-site request forgery CSRF vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the attacker-specified...

3.5CVSS5.3AI score0.00315EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/09/06 1:15 p.m.•19 views

CVE-2023-41947

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials...

4.3CVSS5.8AI score0.00448EPSS
SaveExploits0References2
Prion
Prion
•added 2023/09/06 1:15 p.m.•31 views

Design/Logic Flaw

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials...

4CVSS4.5AI score0.00448EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/09/06 1:15 p.m.•33 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the attacker-specified...

3.5CVSS4AI score0.00315EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/09/06 12:19 p.m.•56 views

CVE-2023-36387 Apache Superset: Improper API permission for low privilege users

An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma user to test database connections...

5.4CVSS5.6AI score0.01134EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/09/06 12:09 p.m.•47 views

CVE-2023-41947

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials...

5.2AI score0.00448EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/09/06 12:09 p.m.•21 views

CVE-2023-41947

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials...

6.6AI score0.00448EPSS
SaveExploits0References2
CVE
CVE
•added 2023/09/06 12:09 p.m.•127 views

CVE-2023-41947

CVE-2023-41947 affects Jenkins Frugal Testing Plugin 1.1 and earlier. The root cause is a missing permission check, allowing attackers with Overall/Read permissions to connect to Frugal Testing using attacker-specified credentials. Documented impact is limited to the ability to connect with suppl...

4.3CVSS4.4AI score0.00448EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2023/09/06 12:09 p.m.•4 views

CVE-2023-41947

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials...

5.3CVSS0.00448EPSS
SaveExploits0References3
CVE
CVE
•added 2023/09/06 12:09 p.m.•136 views

CVE-2023-41946

CVE-2023-41946 concerns a CSRF vulnerability in Jenkins Frugal Testing Plugin, affecting version 1.1 and earlier. The flaw allows an attacker to connect to Frugal Testing using attacker-specified credentials and to retrieve test IDs and names if the credential maps to the attacker’s username. Con...

3.5CVSS4AI score0.00315EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/06 12:09 p.m.•19 views

CVE-2023-41946

A cross-site request forgery CSRF vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the attacker-specified...

6.7AI score0.00315EPSS
SaveExploits0References2
Mend
Mend
•added 2023/09/06 12:09 p.m.•8 views

CVE-2023-41946

A cross-site request forgery CSRF vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the attacker-specified...

5.1CVSS0.00315EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/09/06 12:09 p.m.•68 views

CVE-2023-41946

A cross-site request forgery CSRF vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the attacker-specified...

4.7AI score0.00315EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/06 12:00 a.m.•17 views

Jenkins Plugin Frugal Testing Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS6.7AI score0.00448EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/09/06 12:00 a.m.•19 views

Jenkins Plugin Frugal Testing Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

3.5CVSS6.7AI score0.00315EPSS
SaveExploits0References4
Rows per page
Query Builder