Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Jenkins Report Portal Plugin — Jenkins Security Advisory 2023-04-12 Clear all filters
TI-2023-14361 CVE-2023-30526 · GHSA-c9jf-rhvg-p65r

Missing authorization in Jenkins Report Portal Plugin

Priority LOW 30

A missing permission check in Jenkins Report Portal Plugin 0.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified bearer token authentication.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00542 Published 2023-04-12 No fix listed CWE-862
TI-2023-14360 CVE-2023-30525 · GHSA-c8ff-j5gm-6492

Cross-site request forgery in Jenkins Report Portal Plugin

Priority MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in Jenkins Report Portal Plugin 0.5 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified bearer token authentication.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0078 Published 2023-04-12 No fix listed CWE-352
TI-2023-14358 CVE-2023-30523 · GHSA-qgw9-vgrf-h723

Cleartext storage of sensitive information in Jenkins Report Portal Plugin

Priority LOW 20

Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration where they can be viewed by users with Item/Extend…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00326 Published 2023-04-12 No fix listed CWE-311