CVE-2022-36913

The CVE-2022-36913 entry concerns Jenkins Openstack Heat Plugin versions 1.5 and earlier, which do not perform permission checks in methods implementing form validation. The underlying issue enables attackers with Overall/Read permission to check for the existence of an attacker-specified file pa...

CVE-2022-36912

Affected software: Jenkins Openstack Heat Plugin (versions 1.5 and earlier). Root cause: missing permission check in methods implementing form validation. Impact: attackers with Overall/Read permissions can connect to an attacker-specified URL (no other impact described). Status/mitigation: no ex...