Jenkins Project Jenkins Maven Cascade Release Plugin
2 CVEs affecting Jenkins Project Jenkins Maven Cascade Release Plugin. Latest disclosed: 2020-10-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-2295 | Medium | 6.5 | 2020-10-08 | A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout… |
CVE-2020-2294 | Medium | 6.5 | 2020-10-08 | Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permi… |