Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins MongoDB Plugin unspecified Clear all filters
TI-2020-02145 CVE-2020-2268 · GHSA-j6p9-hm3q-hwmj

Cross-site request forgery in Jenkins MongoDB Plugin

Priority LOW 39

A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00691 Published 2020-09-16 No fix listed CWE-352
TI-2020-02144 CVE-2020-2267 · GHSA-c26h-8h4p-4jgj

Missing authorization in Jenkins MongoDB Plugin

Priority LOW 21

A missing permission check in Jenkins MongoDB Plugin 1.3 and earlier allows attackers with Overall/Read permission to gain access to some metadata of any arbitrary files on the Jenkins controller.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00691 Published 2020-09-16 No fix listed CWE-862