Jenkins Deployment Dashboard Plugin... CVE-2022-34798

3.5 AV AC AU C I A
发布: 2022-06-30
修订: 2024-11-21

Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息