Skip to content
Sign in
Not rated

CVE-2022-34813 A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with…

Description

A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to create and delete XPath expressions.

Affected products and versions

Product Affected versions Fixed in
Jenkins XPath Configuration Viewer Plugin 1.1 earliest → 1.1.1 No fix stated

Other CVEs of Jenkins XPath Configuration Viewer Plugin

The 3 CVEs of Jenkins XPath Configuration Viewer Plugin →
CVE-2022-34812 A cross-site request forgery (CSRF) vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier… Not rated CVE-2022-34811 A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with… Not rated
Track this CVE