Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Barchart Clear all filters
TI-2020-02172 CVE-2020-2295 · GHSA-wfpw-hqjg-58ph

Cross-site request forgery in Jenkins Maven Cascade Release Plugin

Priority LOW 30

A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00538 Published 2020-10-08 No fix listed CWE-352
TI-2020-02171 CVE-2020-2294 · GHSA-5xv9-gp22-gqm5

Missing authorization in Jenkins Maven Cascade Release Plugin

Priority LOW 30

Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfig…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00808 Published 2020-10-08 No fix listed CWE-862