Aller au contenu
Se connecter
4.3 Moyenne

CVE-2025-58459 Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API…

Description

Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins global-build-stats Plugin Versions non publiées

Autres CVE de Jenkins global-build-stats Plugin

Les 2 CVE de Jenkins global-build-stats Plugin →
CVE-2022-27207 Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the… Non notée
Suivre cette CVE