Avatar

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-10377 Maven MEDIUM This Month

A missing permission check in Jenkins Avatar Plugin 1.2 and earlier allows attackers with Overall/Read access to change the avatar of any user of Jenkins. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Avatar

NVD

CVSS 3.1

4.3

EPSS

0.7%

CVE-2019-10377 Maven

EPSS 1% CVSS 4.3

MEDIUM This Month

A missing permission check in Jenkins Avatar Plugin 1.2 and earlier allows attackers with Overall/Read access to change the avatar of any user of Jenkins. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Avatar

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy