Em resumo
- CVE-2020-2294 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta com.barchart.jenkins:maven-release-cascade, maven cascade release (barchart).
- Chance de exploração nos próximos 30 dias (EPSS): 0.81%, maior que 57.1% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.
NVD description
Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.
Mais vulnerabilidades de com.barchart.jenkins:maven-release-cascade
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free