| Package | Affected versions | Patched versions |
|---|---|---|
| com.xebialabs.deployit.ci:deployit-plugin | < 7.5.5 | 7.5.5 |
| xebialabs xl deploy | ≤ 7.5.3 |
A missing permission check in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free