Jenkins dbCharts Plugin vulnerabilities

2 known vulnerabilities in Jenkins dbCharts Plugin from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Jenkins dbCharts Plugin: Missing Authorization

  CVE-2022-25206Feb 15, 2022Jenkins

  A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified database via JDBC using attacker-specified credentials.

• 8.8 High severity

  Jenkins dbCharts Plugin: Cross-Site Request Forgery

  CVE-2022-25205Feb 15, 2022Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to connect to an attacker-specified database via JDBC using attacker-specified credentials and to determine if a class is available in the Jenkins i