Show filters
1,655 Total Results
Displaying 71-80 of 1,655
Sort by:
Attacker Value
Unknown
CVE-2023-50768
Disclosure Date: December 13, 2023 (last updated December 19, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
0
Attacker Value
Unknown
CVE-2023-50767
Disclosure Date: December 13, 2023 (last updated December 19, 2023)
Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML.
0
Attacker Value
Unknown
CVE-2023-50766
Disclosure Date: December 13, 2023 (last updated December 19, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML.
0
Attacker Value
Unknown
CVE-2023-50765
Disclosure Date: December 13, 2023 (last updated December 19, 2023)
A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read the contents of a Groovy script by knowing its ID.
0
Attacker Value
Unknown
CVE-2023-50764
Disclosure Date: December 13, 2023 (last updated December 19, 2023)
Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing attackers with Scriptler/Configure permission to delete arbitrary files on the Jenkins controller file system.
0
Attacker Value
Unknown
CVE-2023-49674
Disclosure Date: November 29, 2023 (last updated December 06, 2023)
A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.
0
Attacker Value
Unknown
CVE-2023-49673
Disclosure Date: November 29, 2023 (last updated December 06, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.
0
Attacker Value
Unknown
CVE-2023-49656
Disclosure Date: November 29, 2023 (last updated December 06, 2023)
Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
0
Attacker Value
Unknown
CVE-2023-49655
Disclosure Date: November 29, 2023 (last updated December 06, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.
0
Attacker Value
Unknown
CVE-2023-49654
Disclosure Date: November 29, 2023 (last updated December 06, 2023)
Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.
0
