Lucene search
Blue Ocean Security Vulnerabilities - 2020
cve
Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system.
6.5CVSS
6.1AI Score
0.001EPSS
2020-09-16 02:15 PM
51
cve
A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
4.3CVSS
4.2AI Score
0.001EPSS
2020-09-16 02:15 PM
62