Elasticbox Ci vulnerabilities

2 known vulnerabilities in Elasticbox Ci from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Jenkins ElasticBox CI Plugin: Missing Authorization

  CVE-2023-37965Jul 12, 2023Jenkins

  A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials s

• 8.8 High severity

  Jenkins ElasticBox CI Plugin: Cross-Site Request Forgery

  CVE-2023-37964Jul 12, 2023Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored