io.jenkins.plugins:frugal-testing

2 results · Feed

• Medium 4.3
  CVE-2023-41947

  Missing permission checks in Jenkins Frugal Testing Plugin

  A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials.

  Jenkins Project Jenkins Frugal Testing Plugin io.jenkins.plugins:frugal-testing Web / CMS Maven
  Sep 6, 2023
• Low 3.5
  CVE-2023-41946

  CSRF vulnerability in Jenkins Frugal Testing Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credentia…

  Jenkins Project Jenkins Frugal Testing Plugin io.jenkins.plugins:frugal-testing Web / CMS Maven
  Sep 6, 2023