| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:assembla-auth | ≤ 1.14 | |
| assembla auth | ≤ 1.14 |
Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be granted Overall/Manage and Overall/SystemRead permissions, even if those permissions are disabled and should not be granted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free