Jenkins Project Jenkins Lockable Resources Plugin
2 CVEs affecting Jenkins Project Jenkins Lockable Resources Plugin. Latest disclosed: 2020-09-23. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-2281 | Medium | 5.4 | 2020-09-23 | A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and rese… |
CVE-2019-1003042 | Medium | 5.4 | 2019-03-28 | A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary J… |