Package · Maven

org.jenkins-ci.plugins:audit2db

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2019-1003077

Missing permission check in Jenkins Audit to Database Plugin

A missing permission check in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

Jenkins Project Jenkins Audit to Database Plugin org.jenkins-ci.plugins:audit2db Web / CMS Maven

Apr 4, 2019
Medium 6.5

CVE-2019-1003076

CSRF vulnerability in Jenkins Audit to Database Plugin

A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation method allows attackers to initiate a connection to an attacker-specified server.

Jenkins Project Jenkins Audit to Database Plugin org.jenkins-ci.plugins:audit2db Web / CMS Maven

Apr 4, 2019