Package · Maven

org.jenkinsci.plugins.spoonscript:spoonscript

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.5

CVE-2023-30532

Lack of authentication mechanism in Jenkins TurboScript Plugin webhook

A missing permission check in Jenkins TurboScript Plugin 1.3 and earlier allows attackers with Item/Read permission to trigger builds of jobs corresponding to the attacker-specified repository.

Jenkins Project Jenkins TurboScript Plugin org.jenkinsci.plugins.spoonscript:spoonscript Web / CMS Maven

Apr 12, 2023