Not rated

CVE-2023-50779 Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read…

Description

Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified token.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins PaaSLane Estimate Plugin 1.0	earliest → 1.0.4	No fix stated

The 4 CVEs of Jenkins PaaSLane Estimate Plugin →

CVE-2023-50778 A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers… Not rated CVE-2023-50776 Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml… Not rated CVE-2023-50777 Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job… 4.3 Medium

Do you use Jenkins PaaSLane Estimate Plugin?

Track this CVE Watch Jenkins PaaSLane Estimate Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-50779

Timeline

Published December 13, 2023
Last modified February 13, 2025

References

Jenkins Security Advisory 2023-12-13 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE

CVE-2023-50779 Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read…

Description

Affected products and versions

Other CVEs of Jenkins PaaSLane Estimate Plugin