| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:nomad | < 0.6.3 | 0.6.3 |
| nomad | ≤ 0.4 |
A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free