Jenkins OWASP ZAP Plugin vulnerabilities
1 known vulnerability in Jenkins OWASP ZAP Plugin from Jenkins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Jenkins OWASP ZAP Plugin: Externally Controlled Reference to a Resource in Another Sphere
Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller.