Package · Maven

org.jenkins-ci.plugins:ease-plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 6.5

CVE-2023-35149

Jenkins Digital.ai App Management Publisher Plugin missing permission checks

A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins.

Jenkins Project Jenkins Digital.ai App Management Publisher Plugin org.jenkins-ci.plugins:ease-plugin Web / CMS Maven

Jun 14, 2023
Medium 4.2

CVE-2023-35148

Jenkins Digital.ai App Management Publisher Plugin vulnerable to Cross-Site Request Forgery

A cross-site request forgery (CSRF) vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins.

Jenkins Project Jenkins Digital.ai App Management Publisher Plugin org.jenkins-ci.plugins:ease-plugin Web / CMS Maven

Jun 14, 2023