Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins SWAMP Plugin unspecified Clear all filters
TI-2022-08925 CVE-2022-25212 · GHSA-2pj6-5hqc-w5x9

Cross-site request forgery in Jenkins SWAMP Plugin

Priority LOW 39

A cross-site request forgery (CSRF) vulnerability in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00684 Published 2022-02-15 No fix listed CWE-352
TI-2022-08924 CVE-2022-25211 · GHSA-8p8q-wvxx-jq94

Missing authorization in Jenkins SWAMP Plugin

Priority MEDIUM 40

A missing permission check in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server using attacker-specified credentials.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0111 Published 2022-02-15 No fix listed CWE-862