Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins Sounds Plugin unspecified Clear all filters
TI-2020-01975 CVE-2020-2098 · GHSA-x37x-3fw2-5qw2

Cross-site request forgery in Jenkins Sounds Plugin

Priority MEDIUM 40

A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01019 Published 2020-01-15 Fixed in 0.6 CWE-352
TI-2020-01974 CVE-2020-2097 · GHSA-h8w6-c53g-53vv

Incorrect authorization in Jenkins Sounds Plugin

Priority MEDIUM 40

Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jen…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01209 Published 2020-01-15 Fixed in 0.6 CWE-863