Количество 2
Количество 2
CVE-2022-34798
больше 3 лет назад
Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.
CVSS3: 4.3
EPSS: Низкий
GHSA-q4mr-j6w9-r2mr
больше 3 лет назад
Missing Authorization in Jenkins Deployment Dashboard Plugin
CVSS3: 5.4
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-34798 Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials. | CVSS3: 4.3 | 1% Низкий | больше 3 лет назад | |
GHSA-q4mr-j6w9-r2mr Missing Authorization in Jenkins Deployment Dashboard Plugin | CVSS3: 5.4 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу
20