Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Benchmark Evaluator Plugin — Jenkins Security Advisory 2023-07-12 Clear all filters
TI-2023-19395 CVE-2023-37963 · GHSA-5g87-44p9-v4j7

Missing authorization in Jenkins Benchmark Evaluator Plugin

Priority LOW 25

A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and to check for the existence of directories, `.cs…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00502 Published 2023-07-12 No fix listed CWE-862
TI-2023-19394 CVE-2023-37962 · GHSA-wgvx-9rh5-4g4m

Cross-site request forgery in Jenkins Benchmark Evaluator Plugin

Priority MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers to connect to an attacker-specified URL and to check for the existence of directories, `.csv`, an…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00491 Published 2023-07-12 No fix listed CWE-352