Описание
Missing Authorization in Jenkins XP-Dev Plugin
A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to an attacker-specified repository.
Пакеты
Наименование
com.cloudbees.jenkins.plugins:xpdev
maven
Затронутые версииВерсия исправления
<= 1.0
Отсутствует
Связанные уязвимости
CVSS3: 5.3
nvd
около 3 лет назад
A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to an attacker-specified repository.