3 results · Clear filters · Feed
-
Medium 6.6
Jenkins LDAP Plugin deserializes data from LDAP referrals without validation
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.
-
Medium 6.6
Jenkins LDAP Plugin follows LDAP referrals
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.
-
Medium 4.3
Jenkins LDAP Plugin vulnerable to Cross-Site Request Forgery
A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.