Количество 2
Количество 2
CVE-2022-25205
почти 4 года назад
A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to connect to an attacker-specified database via JDBC using attacker-specified credentials and to determine if a class is available in the Jenkins instance.
CVSS3: 8.8
EPSS: Низкий
GHSA-vx6f-6rp6-f2px
почти 4 года назад
Cross-Site Request Forgery in Jenkins dbCharts Plugin
CVSS3: 8.8
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-25205 A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to connect to an attacker-specified database via JDBC using attacker-specified credentials and to determine if a class is available in the Jenkins instance. | CVSS3: 8.8 | 0% Низкий | почти 4 года назад | |
GHSA-vx6f-6rp6-f2px Cross-Site Request Forgery in Jenkins dbCharts Plugin | CVSS3: 8.8 | 0% Низкий | почти 4 года назад |
Уязвимостей на страницу
20