Project Inheritance Security Vulnerabilities and Issues — Project Inheritance CVE List

Lucene search

JenkinsProject Inheritance

3 matches found

CVE•added 2020/06/03 1:15 p.m.•62 views

CVE-2020-2197

Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance Project job configurations in XML format.

4.3CVSS4.5AI score0.00031EPSS

CVE•added 2019/09/25 4:15 p.m.•46 views

CVE-2019-10409

A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates.

4.3CVSS4.4AI score0.00031EPSS

CVE•added 2019/09/25 4:15 p.m.•44 views

CVE-2019-10408

A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project generation from templates.

4.3CVSS4.5AI score0.00377EPSS