Jenkins Mabl
5 CVEs affecting Jenkins Mabl. Latest disclosed: 2023-07-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10283 | High | 8.8 | 2019-04-04 | Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permissio… |
CVE-2023-37953 | Medium | 6.5 | 2023-07-12 | A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL usin… |
CVE-2023-37952 | Medium | 6.5 | 2023-07-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-specified URL using atta… |
CVE-2023-37951 | Medium | 6.5 | 2023-07-12 | Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access… |
CVE-2023-37950 | Medium | 4.3 | 2023-07-12 | A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials… |