Package · Maven

io.jenkins.plugins:perfecto

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 4.3

CVE-2020-2260

Missing permission check in Perfecto Plugin

A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.

Jenkins Project Jenkins Perfecto Plugin io.jenkins.plugins:perfecto Web / CMS Maven

Sep 16, 2020
High 8.8

CVE-2020-2261 Public exploit

OS command execution vulnerability in Perfecto Plugin

Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary commands on the Jenkins controller

Jenkins Project Jenkins Perfecto Plugin io.jenkins.plugins:perfecto Web / CMS Maven

Sep 16, 2020