Jenkins Project Jenkins Avatar Plugin
1 CVEs affecting Jenkins Project Jenkins Avatar Plugin. Latest disclosed: 2019-08-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10377 | Medium | 4.3 | 2019-08-07 | A missing permission check in Jenkins Avatar Plugin 1.2 and earlier allows attackers with Overall/Read access to change the avatar of any user of Jenkins. |