1 result · Feed
-
Medium 5.3
Jenkins Assembla merge request builder Plugin missing authentication to access endpoint
A missing permission check in Jenkins Assembla merge request builder Plugin 1.1.13 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.