Jenkins

Nexus Platform

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-50766

  • EPSS 0.07%
  • Published 13.12.2023 18:15:43
  • Last modified 21.11.2024 08:37:16

A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML.

5.4

CVE-2023-50767

  • EPSS 0.13%
  • Published 13.12.2023 18:15:43
  • Last modified 21.11.2024 08:37:16

Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML.

8.8

CVE-2023-50768

  • EPSS 0.07%
  • Published 13.12.2023 18:15:43
  • Last modified 22.05.2025 19:15:37

A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, captur...

4.3

CVE-2023-50769

  • EPSS 0.05%
  • Published 13.12.2023 18:15:43
  • Last modified 21.11.2024 08:37:16

Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, ca...