| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:openshift-deployer | ≤ 1.2.0 | |
| openshift deployer | ≤ 1.2.0 |
A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free