Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins Recipe Plugin unspecified Clear all filters
TI-2022-15601 CVE-2022-34794 · GHSA-j33r-cgm6-pv48

Missing authorization in Jenkins Recipe Plugin

Priority LOW 30

Missing permission checks in Jenkins Recipe Plugin 1.2 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00656 Published 2022-06-30 No fix listed CWE-862
TI-2022-15599 CVE-2022-34792 · GHSA-hv54-cc8f-42jq

Cross-site request forgery in Jenkins Recipe Plugin

Priority LOW 35

A cross-site request forgery (CSRF) vulnerability in Jenkins Recipe Plugin 1.2 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00506 Published 2022-06-30 No fix listed CWE-352