| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:gearman-plugin | < 0.4.0 | 0.4.0 |
| gearman | ≤ 0.2.0 |
A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free