WordPress CMS Commander Plugin <= 2.287 is vulnerable to Broken Access Control

Software CMS Commander Type Plugin Vulnerable versions = 2.287 Fixed in 2.288 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-3325 Patch priority Low CVSS severity Low 8.1 Developer Claim ownership PSID 74937eb26e46 Credits Lana Codes Required privilege...

GHSA-PVWX-3JX5-24R2 Lack of type validation in agent related REST API in Jenkins

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node. This allows attackers with Computer/Configure permission to replace a node with one of a different type. Jenkins 2.287, L...