| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:sounds | < 0.6 | 0.6 |
| sounds | ≤ 0.5 |
Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free