Jenkins Orka by MacStadium Plugin vulnerabilities

2 known vulnerabilities in Jenkins Orka by MacStadium Plugin from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Jenkins Orka by MacStadium Plugin: Missing Authorization

  CVE-2023-37949Jul 12, 2023Jenkins

  A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentia

• 8.8 High severity

  Jenkins Orka by MacStadium Plugin: Cross-Site Request Forgery

  CVE-2023-24432Jan 26, 2023Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credent