Failed Job Deactivator

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-34818 Maven MEDIUM This Month

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Failed Job Deactivator

NVD

CVSS 3.1

4.3

EPSS

0.6%

CVE-2022-34817 Maven MEDIUM This Month

A cross-site request forgery (CSRF) vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jenkins Failed Job Deactivator

NVD

CVSS 3.1

4.3

EPSS

0.5%

CVE-2022-34818 Maven

EPSS 1% CVSS 4.3

MEDIUM This Month

Authentication Bypass Jenkins Failed Job Deactivator

NVD

CVE-2022-34817 Maven

EPSS 0% CVSS 4.3

MEDIUM This Month

CSRF Jenkins Failed Job Deactivator

NVD