Product · Jenkins Project

Jenkins Netsparker Cloud Scan Plugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2019-10289

CSRF vulnerability in Jenkins Netsparker Enterprise Scan Plugin

A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation method allowed attackers to initiate a connection to an attacker-specified server.

Jenkins Project Jenkins Netsparker Cloud Scan Plugin org.jenkins-ci.plugins:netsparker-cloud-scan Web / CMS Maven

Apr 4, 2019
Medium 6.5

CVE-2019-10290

Missing permission check in Jenkins Netsparker Cloud Scan Plugin

A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation method allowed attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

Jenkins Project Jenkins Netsparker Cloud Scan Plugin org.jenkins-ci.plugins:netsparker-cloud-scan Web / CMS Maven

Apr 4, 2019