Package · Maven

io.jenkins.plugins:chaos-monkey

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2020-2323

Missing permission checks in Jenkins Chaos Monkey Plugin

Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.

Jenkins Project Jenkins Chaos Monkey Plugin io.jenkins.plugins:chaos-monkey Web / CMS Maven

Dec 3, 2020