Scp Publisher vulnerabilities

2 known vulnerabilities in Scp Publisher from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Jenkins SCP publisher Plugin: Missing Authorization

  CVE-2022-25199Feb 15, 2022Jenkins

  A missing permission check in Jenkins SCP publisher Plugin 1.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials.

• 8.8 High severity

  Jenkins SCP publisher Plugin: Cross-Site Request Forgery

  CVE-2022-25198Feb 15, 2022Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins SCP publisher Plugin 1.8 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.