Jenkins SWAMP Plugin vulnerabilities

2 known vulnerabilities in Jenkins SWAMP Plugin from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Jenkins SWAMP Plugin: Cross-Site Request Forgery

  CVE-2022-25212Feb 15, 2022Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials.

• 8.8 High severity

  Jenkins SWAMP Plugin: Missing Authorization

  CVE-2022-25211Feb 15, 2022JenkinsEPSS 1.11%

  A missing permission check in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server using attacker-specified credentials.