Not rated

CVE-2023-37956 A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with…

Description

A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Test Results Aggregator Plugin 1.2	earliest → 1.2.13	No fix stated

The 2 CVEs of Jenkins Test Results Aggregator Plugin →

CVE-2023-37955 A cross-site request forgery (CSRF) vulnerability in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows… Not rated

Do you use Jenkins Test Results Aggregator Plugin?

Track this CVE Watch Jenkins Test Results Aggregator Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-37956

Timeline

Published July 12, 2023
Last modified November 6, 2024

References

Jenkins Security Advisory 2023-07-12 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE

CVE-2023-37956 A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with…

Description

Affected products and versions

Other CVEs of Jenkins Test Results Aggregator Plugin