Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-45399 EUVD-2022-7450GHSA-w8wg-62wf-62gm

Jenkins Cluster Statistics Plugin Missing Authorization vulnerability

Published Nov 15, 2022 · Updated Apr 30, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Cluster Statistics Plugin Package: org.zeroturnaround:cluster-stats Category: Web / CMS Ecosystem: Maven

Description

A missing permission check in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded Jenkins Cluster Statistics.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Cluster Statistics Plugin unspecified – ≤ 0.4.6 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.zeroturnaround:cluster-stats <= 0.4.6 — GHSA-w8wg-62wf-62gm

Advisories 1

References