Lucene search

Release Helper Security Vulnerabilities - May

cve

CVE-2022-27214

A cross-site request forgery (CSRF) vulnerability in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.

4.3CVSS

4.8AI Score

0.001EPSS

2022-03-15 05:15 PM

cve

CVE-2022-27215

A missing permission check in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

4.3CVSS

4.7AI Score

0.001EPSS

2022-03-15 05:15 PM

103