Jenkins Chef Sinatra Plugin

2 results · Clear filters · Feed

• Medium 6.5
  CVE-2019-1003086

  CSRF vulnerability in Jenkins sinatra-chef-builder Plugin

  A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.

  Jenkins Project Jenkins Chef Sinatra Plugin org.jenkins-ci.plugins:sinatra-chef-builder Web / CMS Maven
  Apr 4, 2019
• Medium 6.5
  CVE-2019-1003087

  Missing permission check in Jenkins sinatra-chef-builder Plugin

  A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

  Jenkins Project Jenkins Chef Sinatra Plugin org.jenkins-ci.plugins:sinatra-chef-builder Web / CMS Maven
  Apr 4, 2019