Product · Jenkins Project

Jenkins Kmap Plugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2019-10292

CSRF vulnerability in Jenkins Nomad Plugin allow SSRF

A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers to initiate a connection to an attacker-specified server.

Jenkins Project Jenkins Kmap Plugin org.jenkins-ci.plugins:kmap-jenkins Web / CMS Maven

Apr 4, 2019
Medium 6.5

CVE-2019-10293

Missing permission check in Jenkins Kmap Plugin allow SSRF

A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

Jenkins Project Jenkins Kmap Plugin org.jenkins-ci.plugins:kmap-jenkins Web / CMS Maven

Apr 4, 2019