Read the docs

Barchart

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Barchart records in CISA KEV

No Barchart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Maven Cascade Release 2 records LOW

Records

2 records in Maven Cascade Release · all components

TI-2020-02172 CVE-2020-2295 · GHSA-wfpw-hqjg-58ph

Cross-site request forgery in Jenkins Maven Cascade Release Plugin

Priority LOW 30

A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00538 Published 2020-10-08 No fix listed CWE-352
TI-2020-02171 CVE-2020-2294 · GHSA-5xv9-gp22-gqm5

Missing authorization in Jenkins Maven Cascade Release Plugin

Priority LOW 30

Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfig…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00808 Published 2020-10-08 No fix listed CWE-862
Open these records in search →