Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Frugal Testing Plugin — Jenkins Security Advisory 2023-09-06 Clear all filters
TI-2023-22332 CVE-2023-41947 · GHSA-p986-hpr3-493p

Missing authorization in Jenkins Frugal Testing Plugin

Priority LOW 20

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00448 Published 2023-09-06 No fix listed CWE-862
TI-2023-22331 CVE-2023-41946 · GHSA-g6rx-2w84-xmgj

Cross-site request forgery in Jenkins Frugal Testing Plugin

Priority LOW 17

A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names fr…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00315 Published 2023-09-06 No fix listed CWE-352