Jenkins Assembla Auth Plugin vulnerabilities

2 known vulnerabilities in Jenkins Assembla Auth Plugin from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Jenkins Assembla Auth Plugin: Missing Authorization

  CVE-2023-41945Sep 6, 2023Jenkins

  Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be granted Overall/Manage and Overall/SystemRead permissions, even if those permissions are disabled and shoul

• 8.8 High severity

  Jenkins Assembla Auth Plugin: Cross-Site Request Forgery

  CVE-2023-37961Jul 12, 2023Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into logging in to the attacker's account.