CVE-2023-24452

CVE-2023-24452 describes a CSRF vulnerability in Jenkins TestQuality Updater Plugin (versions ≤ 1.3) that allows an attacker to cause the Jenkins controller to connect to an attacker-specified URL using attacker-specified credentials. The issue is network-exploitable and requires user interaction...

CVE-2023-24453

Affected software: Jenkins TestQuality Updater Plugin. Vulnerability: missing permission checks in form validation (versions 1.3 and earlier) allow attackers with Overall/Read to connect to an attacker-specified URL using attacker-specified credentials. Impact: potential unauthorized network acce...

CVE-2023-24454

CVE-2023-24454 affects Jenkins TestQuality Updater Plugin (versions 1.3 and earlier). The vulnerability stems from storing the TestQuality Updater password unencrypted in the global configuration file on the Jenkins controller (com.testquality.jenkins.TestQualityNotifier.xml), enabling users with...